{"id":"CVE-2020-21101","details":"Cross Site Scriptiong vulnerabilityin Screenly screenly-ose all versions, including v1.8.2 (2019-09-25-Screenly-OSE-lite.img), in the 'Add Asset' page via manipulation of a 'URL' field, which could let a remote malicious user execute arbitrary code.","modified":"2026-08-27T08:39:37.982102Z","published":"2021-04-29T17:15:08.877Z","references":[{"type":"ADVISORY","url":"https://github.com/Screenly/screenly-ose/issues/1254"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/Screenly/Anthias","events":[{"introduced":"85732dd849d430cd1202f1dbdf75961ff9463f21"},{"last_affected":"6c2c2fd78099895fc3797024f926af77c16fa38d"}],"database_specific":{"extracted_events":[{"introduced":"0.9"},{"last_affected":"0.9"},{"introduced":"0.9.1"},{"last_affected":"0.9.1"},{"introduced":"0.10"},{"last_affected":"0.10"},{"introduced":"0.11"},{"last_affected":"0.11"},{"introduced":"0.12"},{"last_affected":"0.12"},{"introduced":"0.12.1"},{"last_affected":"0.12.1"},{"introduced":"0.13"},{"last_affected":"0.13"},{"introduced":"0.14"},{"last_affected":"0.14"},{"introduced":"0.15"},{"last_affected":"0.15"},{"introduced":"0.15.1"},{"last_affected":"0.15.1"},{"introduced":"0.16"},{"last_affected":"0.16"},{"introduced":"0.17"},{"last_affected":"0.17"},{"introduced":"0.18"},{"last_affected":"0.18"},{"introduced":"0.18.1"},{"last_affected":"0.18.1"},{"introduced":"0.18.2"},{"last_affected":"0.18.2"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:screenly:screenly:0.9:*:*:*:ose:*:*:*","cpe:2.3:a:screenly:screenly:0.9.1:*:*:*:ose:*:*:*","cpe:2.3:a:screenly:screenly:0.10:*:*:*:ose:*:*:*","cpe:2.3:a:screenly:screenly:0.11:*:*:*:ose:*:*:*","cpe:2.3:a:screenly:screenly:0.12:*:*:*:ose:*:*:*","cpe:2.3:a:screenly:screenly:0.12.1:*:*:*:ose:*:*:*","cpe:2.3:a:screenly:screenly:0.13:*:*:*:ose:*:*:*","cpe:2.3:a:screenly:screenly:0.14:*:*:*:ose:*:*:*","cpe:2.3:a:screenly:screenly:0.15:*:*:*:ose:*:*:*","cpe:2.3:a:screenly:screenly:0.15.1:*:*:*:ose:*:*:*","cpe:2.3:a:screenly:screenly:0.16:*:*:*:ose:*:*:*","cpe:2.3:a:screenly:screenly:0.17:*:*:*:ose:*:*:*","cpe:2.3:a:screenly:screenly:0.18:*:*:*:ose:*:*:*","cpe:2.3:a:screenly:screenly:0.18.1:*:*:*:ose:*:*:*","cpe:2.3:a:screenly:screenly:0.18.2:*:*:*:ose:*:*:*"]}}],"versions":["0.10","0.11","0.12","0.12.1","0.13","0.14","0.15","0.16","0.17","0.18","0.18.1","0.18.2","0.9","0.9.1","v0.15.1","v0.15","v0.14","v0.13","v0.12.1","v0.12","v0.11","v0.10","v0.9"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-21101.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"}]}