{"id":"CVE-2021-30146","aliases":["EUVD-2021-17083","GHSA-pj73-7h6v-vg38","UBUNTU-CVE-2021-30146"],"status":"published","title":"Seafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality.\"","description":"Seafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality.\"","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0086,"percentile":0.58813,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-79"],"published":"2021-04-06T15:51:43Z","modified":"2026-10-24T10:30:18Z","exploits":[{"source":"pocgithub","id":"Security-AVS/CVE-2021-30146","title":"Security-AVS/CVE-2021-30146","date":"2021-04-06","url":"https://github.com/Security-AVS/CVE-2021-30146"}],"affected":[{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"seafile-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.7-1build1","6.1.1-1","6.1.3-1","6.1.3-2","6.1.4-1","6.1.4-1build1","6.1.5-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"seafile-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.11-1","7.0.2-2","7.0.4-1","7.0.5-1","7.0.6-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"seafile-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.10-3","8.0.4-1","8.0.5-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"seafile-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.0.3+ds1-1","9.0.4+ds1-1","9.0.4+ds1-1ubuntu1","9.0.4+ds1-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"seafile-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.0.12+ds1-1","9.0.13+ds1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"seafile-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.0.16+ds1-1","9.0.18+ds1-1.1","9.0.18+ds1-1.2","9.0.20+ds1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"seafile-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.0.13+ds1-1","9.0.15+ds1-2","9.0.16+ds1-1"]}],"products":[{"vendor":"seafile","product":"seafile"}],"references":[{"url":"https://github.com/Security-AVS/CVE-2021-30146","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30146"},{"url":"https://github.com/advisories/GHSA-pj73-7h6v-vg38"},{"url":"https://ubuntu.com/security/CVE-2021-30146","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30146","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-30146","description":"Seafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality.\"","status":"published","published":"2021-04-06T15:51:43Z","modified":"2024-08-03T22:24:59.664Z","updated_at":"2026-11-02T14:33:01.852999Z"}],"euvd":[{"id":"EUVD-2021-17083","description":"Seafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality.\"","status":"published","published":"2021-04-06T15:51:43Z","modified":"2024-08-03T22:24:59Z","updated_at":"2026-11-03T03:24:42.963555Z"}],"ghsa":[{"id":"GHSA-pj73-7h6v-vg38","title":"Seafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality.\"","description":"Seafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality.\"","status":"published","published":"2022-05-24T17:46:41Z","modified":"2023-01-29T05:07:07Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:46:09.170985Z"}],"nvd":[{"id":"CVE-2021-30146","description":"Seafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality.\"","status":"published","published":"2021-04-06T16:15:16.69Z","modified":"2026-06-17T03:49:44.583Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:06:51.610648Z"}],"osv":[{"id":"CVE-2021-30146","description":"Seafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality.\"","status":"published","published":"2021-04-06T16:15:16.69Z","modified":"2026-10-24T10:30:18.368672687Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:19.483607Z"},{"id":"UBUNTU-CVE-2021-30146","description":"Seafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality.\"","status":"published","published":"2021-04-06T16:15:00Z","modified":"2026-10-17T12:55:45.527895636Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:27.332852Z"}]}}