Vulnerability Description
Stored XSS and SQL injection vulnerability in MaxBoard could lead to occur Remote Code Execution, which could lead to information exposure and privilege escalation.
CVSS Score
8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Maxb | Maxboard | < 1.9.6.1 |
| Linux | Linux Kernel | - |
Related Weaknesses (CWE)
References
- https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66781Third Party Advisory
- https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66781Third Party Advisory
FAQ
What is CVE-2021-26636?
CVE-2021-26636 is a vulnerability with a CVSS score of 8.8 (HIGH). Stored XSS and SQL injection vulnerability in MaxBoard could lead to occur Remote Code Execution, which could lead to information exposure and privilege escalation.
How severe is CVE-2021-26636?
CVE-2021-26636 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-26636?
Check the references section above for vendor advisories and patch information. Affected products include: Maxb Maxboard, Linux Linux Kernel.