CVE-2021-39391: Cross-site Scripting

September 14, 2021 (updated September 24, 2021)

Cross Site Scripting (XSS) vulnerability exists in the admin panel in Beego via the URI path in an HTTP request, which is activated by administrators viewing the Request Statistics page.

References

github.com/beego/beego/issues/4727
nvd.nist.gov/vuln/detail/CVE-2021-39391

Detect and mitigate CVE-2021-39391 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →