{"id":"CVE-2021-3346","details":"Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template.","modified":"2026-07-08T22:14:04.488821Z","published":"2021-01-29T17:15:12.887Z","references":[{"type":"WEB","url":"https://www.turris.com/"},{"type":"ADVISORY","url":"https://gitlab.nic.cz/turris/foris/foris/-/blob/master/CHANGELOG.rst"},{"type":"REPORT","url":"https://gitlab.nic.cz/turris/foris/foris/-/issues/201"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.nic.cz/turris/foris/foris","events":[{"introduced":"0"},{"fixed":"e06d3276451a7a5aabf7de68c80e8197e0b55ecb"}],"database_specific":{"cpe":"cpe:2.3:a:nic:foris:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"101.1"}],"source":"CPE_RANGE"}}],"versions":["package-v101.0","package-v100.7","package-v100.5","package-v100.6","package-v100.4","package-v100.3","package-v100.2","package-v100.1","package-v100.0","package-v99.10","package-v99.9","package-v99.8","package-v99.7.5","package-v99.7.4","package-v99.7.3","package-v99.7.2","package-v99.7.1","package-v99.7","package-v99.6.1","package-v99.6","package-v99.5","package-v99.4","package-v99.3.2","package-v99.3.1","package-v99.3","package-v99.2","package-v99.1","package-v99.0","package-v98.19.1","package-v98.19","package-v98.18","package-v98.17","package-v98.16","package-v98.15","package-v98.14.1","package-v98.14","package-v98.13","package-v98.12","package-v97.13","package-v97.12","package-v97.11","package-v97.10","package-v97.9","package-v97.8","package-v97.7","package-v97.6","package-v97.5","package-v97.4","package-v96.8","package-v97.3","package-v97.2","package-v97.1","package-v97","package-v96.7","package-v96.6","package-v96.5","package-v95.9","package-v95.8","package-v95.7","package-v95.6","package-v95.5","package-v95.2","package-v95.1","package-v95","package-v93","package-v92","package-v90","package-v89","package-v88","package-v87","package-v86","package-v85","package-v84","package-v83","package-v82","package-v81","package-v80","package-v79","package-v78","package-v77","package-v76","package-v75","package-v74","package-v73","package-v72","package-v71","package-v70","package-v69","package-v68","package-v67","package-v66","package-v65","package-v64","package-v63","package-v62","package-v61","package-v60","package-v57","package-v56","package-v55","package-v54","package-v53","package-v52","package-v51","package-v50","package-v48","package-v46","package-v45","package-v44","package-v41","package-v40","package-v39","package-v38","package-v37","package-v36","package-v35","package-v34","package-v33","package-v32","package-v30","package-v29"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3346.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}