QwikSec

Security Database

CVE

CWE

Training

CVE-2021-26558

Published: Nov 11, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0.

Vendor	Product	Versions
Apache Software Foundation	Apache ShardingSphere-UI	affected `4.1.1 - < Apache ShardingSphere-UI*`

Weaknesses (CWE)

References

https://lists.apache.org/thread/4gzkm1zb6c97v9gl8lcz8ll5xr8o484c

x_refsource_MISC

[oss-security] 20211111 CVE-2021-26558: Apache ShardingSphere-UI: Deserialization of Untrusted Data

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.