CVE-2021-46251

Published February 15th, 2022

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

A reflected cross-site scripting (XSS) in ScratchOAuth2 before commit 1603f04e44ef67dde6ccffe866d2dca16defb293 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.

ScratchVerifier/ScratchOAuth2

Since Scratch has no native OAuth, "Fine, I'll do it myself."

GitHub