CVE-2021-32812 is a reflected cross-site scripting (XSS) vulnerability affecting Monkshu enterprise application server versions 2.90 and earlier. An attacker can craft a malicious URL that, when combined with a server-side bug causing a 500 error, will be reflected in the error response, potentially allowing arbitrary script execution in a user's browser. The vulnerability has a CVSS score of 6.1 (Medium) due to its network attack vector and low attack complexity, but requires user interaction and has limited impact on confidentiality and integrity. There are no known public exploits, Metasploit modules, or ExploitDB entries, and it is not on CISA's KEV catalog, indicating a low current exploitation risk and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.90CPE matchmatch criteria | cpe:2.3:a:tekmonks:monkshu:2.90:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.