Skip to main content

Cloudron

1 CVEs product

Monthly

CVE-2021-40868 MEDIUM POC This Month

In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Cloudron
NVD Exploit-DB
CVSS 3.1
6.1
EPSS
9.1%
EPSS 9% CVSS 6.1
MEDIUM POC This Month

In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Cloudron
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy