CVE-2021-45092

Critical · 9.8

CVSS

9.8

EPSS

40.6%

Published

Dec 16, 2021

CISA due date

—

The record

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter.

Ecosystem	Package	Introduced	Fixed