What is CVE-2021-41191?

CVE-2021-41191 is a high-severity vulnerability in Redon Roblox_purchasing_hub, classified under Improper Encoding or Escaping of Output. CVSS score: 7.5/10. Published 2021-10-27.

How severe is CVE-2021-41191?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Redon Roblox_purchasing_hub

CVE-2021-41191

Roblox-Purchasing-Hub is an open source Roblox product purchasing hub. A security risk in versions 1.0.1 and prior allowed people who have someone's API URL to get product files without an API key. This issue is fixed in version 1.0.2. As…

EPSS: 0.013 (67.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Redon Roblox_purchasing_hub
Redon-tech Roblox-purchasing-hub — versions < 1.0.2

Weakness classification (CWE)

CWE-116 — Improper Encoding or Escaping of Output

References

security-advisories@github.com (x_refsource_CONFIRM, Third Party Advisory)
security-advisories@github.com (Patch, Third Party Advisory, x_refsource_MISC)
security-advisories@github.com (Third Party Advisory, x_refsource_MISC, Release Notes)

Frequently asked questions

What is CVE-2021-41191?: CVE-2021-41191 is a high-severity vulnerability in Redon Roblox_purchasing_hub, classified under Improper Encoding or Escaping of Output. CVSS score: 7.5/10. Published 2021-10-27.
How severe is CVE-2021-41191?: High severity. CVSS v3 base score is 7.5 out of 10.