Vulnerabilities (CVE)

Filtered by vendor Sherlockim Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-29267 1 Sherlockim 1 Sherlockim 2024-02-28 4.3 MEDIUM 6.1 MEDIUM
Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature.