Medium severity6.1NVD Advisory· Published Mar 29, 2021· Updated Jun 17, 2026
CVE-2021-29267
CVE-2021-29267
Description
Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=2021-03-29
Patches
Vulnerability mechanics
References
1- sherlockim.aenvdProduct
News mentions
0No linked articles in our index yet.