Critical Risk Disclosed
CVE-2021-32852
Countly, a product analytics solution, is vulnerable to cross-site scripting prior to version 21.11 of the community edition. The victim must follow a malicious link or be redirected there from malicious web site. The attacker must have an account or be able to create one. This issue is patched in version 21.11.
Exploitation Probability (EPSS)
Low Priority0.57%
The Exploit Prediction Scoring System (EPSS) uses machine learning to estimate the probability that a vulnerability will be exploited in the wild within the next 30 days.
0% (Theoretical)100% (Certainty)
7-Day Exploitation Trend
Vulnerability Timeline
2 eventsFeb 20, 2023
Vulnerability Disclosed
Published to component-level vulnerability database.
Mar 6, 2023
Last Updated
Record updated with new analysis or tags.
Threat Actor Attribution
PREMIUM INTELAssociated Groups:Lazarus Group, APT28
Ransomware Campaigns:LockBit 3.0, BlackCat
IoCs (Indicators):14 IPs, 3 Hashes
Remediation & Mitigation
SOLUTIONOfficial patches and mitigation steps are available for this vulnerability.
# Update Command
apt-get update && apt-get upgrade -y specific-package
# Verify installation
dpkg -l | grep package-name
apt-get update && apt-get upgrade -y specific-package
# Verify installation
dpkg -l | grep package-name
Affected Products
1 Total
count/countly_serverAll Versions
References
https://github.com/Countly/countly-server/blob/6b90bb775e747cabe46fe197c6a6989acc6c3417/frontend/express/app.js#L1112GitHub
Third Party Advisory
https://github.com/Countly/countly-server/blob/6b90bb775e747cabe46fe197c6a6989acc6c3417/frontend/express/views/reset.html#L95GitHub
Third Party Advisory
https://github.com/Countly/countly-server/releases/tag/v21.11GitHub
Release Notes
https://securitylab.github.com/advisories/GHSL-2021-104-countly-server/GitHub
ExploitThird Party Advisory
Am I Vulnerable?
Check your domain or package.json for CVE-2021-32852 exposure.
Vulnerability Details
CVSS Base Score
9/ 10
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Published Date
Feb 20, 2023
Last Modified
Mar 6, 2023
Need Manual Validation?
Automated scanners flag false positives. Get a manual pentest validation for this CVE.