Skip to content
Sign in
8.8 High

CVE-2021-2322 Vulnerability in OpenGrok (component: Web App)

Description

Vulnerability in OpenGrok (component: Web App). Versions that are affected are 1.6.7 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise OpenGrok. Successful attacks of this vulnerability can result in takeover of OpenGrok. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected products and versions

Product Affected versions Fixed in
OpenGrok Versions not published

Other CVEs of OpenGrok

The 3 CVEs of OpenGrok →
CVE-2025-30755 OpenGrok 1.14.1 has a reflected Cross-Site Scripting (XSS) issue when producing the cross reference page 6.1 Medium CVE-2025-21572 OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page 6.1 Medium
Track this CVE