What’s Vulnerable › Vulnerabilities

CVE-2021-34370

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-06-09 · updated 2026-06-17
• Weakness: CWE-79

Description

Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable security flags and we are unable to reproduce them with the available information.

Affected products

• Accela Civic Platform: through 20.1

References

• http://packetstormsecurity.com/files/163115/Accela-Civic-Platform-21.1-Cross-Site-Scripting-Open-Redirection.html
• https://gist.github.com/0xx7/7e9f1b725f7ff98b9239d3cb027b7dc8
• http://packetstormsecurity.com/files/163115/Accela-Civic-Platform-21.1-Cross-Site-Scripting-Open-Redirection.html
• https://gist.github.com/0xx7/7e9f1b725f7ff98b9239d3cb027b7dc8

Get alerted when CVE-2021-34370 or the next vulnerability affects your stack