CVEs-PoC/2021/CVE-2021-29643.md

CVE-2021-29643

Description

PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a connected Active Directory instance.

POC

Reference

• https://raxis.com/blog/prtg-network-monitor-cve-2021-29643
• https://raxis.com/blog/prtg-network-monitor-cve-2021-29643

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/k0pak4/k0pak4