Remote File Inclusion Vulnerability in ArcGIS Server Help Documentation Allows HTML Injection

Remote File Inclusion Vulnerability in ArcGIS Server Help Documentation Allows HTML Injection

CVE-2021-29113 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

A remote file inclusion vulnerability in the ArcGIS Server help documentation may allow a remote, unauthenticated attacker to inject attacker supplied html into a page.

Learn more about our Cis Benchmark Audit For Server Software.