← Database

CVE-2021-3694

HIGH CVSS: 8.2 Published: 2021-08-23 Modified: 2026-06-17

Description

LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure.

Affected Platforms

Debian Debian LinuxLedgersmb Ledgersmb

Weakness Type

CWE-79, CWE-79

References