CVE-2021-4243

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-32850. Reason: This candidate is a duplicate of CVE-2021-32850. Notes: All CVE users should reference CVE-2021-32850 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Published: 2022-12-12 Last update: 2023-11-06 Assigner: [email protected] Source: [email protected]

Conclusion & alert: This CVE is rejected; it is not tracked as an active vulnerability. Mandatory action: Do not treat as an active exposure for patching queues—follow the CVE record status and authoritative vendor or program statements only.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2021-4243

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2025-02-14 1.11% 0.04% -1.06%
2 2023-02-21 0.95% 1.11% +0.15%
3 2022-12-16 0.95%

Full EPSS history (4 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2021-4243

CVSS metrics for this CVE.

No CVSS data in dataset for this CVE.

Weakness enumeration for CVE-2021-4243

GitHub Security Advisory for CVE-2021-4243

GHSA-vc9x-gmmr-p7jj · Severity: medium · Ecosystem: npm — Duplicate advisory: @claviska/jquery-minicolors vulnerable to Cross-site Scripting

OS Trackers for CVE-2021-4243

vendor priority summary link
ubuntu medium CVE-2021-4243 medium priority: Ubuntu including 1 source packages (jquery-minicolors), 7 status rows across 7 suites (bionic, focal, jammy, kinetic, trusty, upstream, xenial): not-affected 5, ignored 2. https://ubuntu.com/security/CVE-2021-4243

Affected software / configurations for CVE-2021-4243

Vendor Product Version Raw CPE
No affected products in dataset.

References for CVE-2021-4243

URL Tags
No references in dataset.
cvelogic Threat Intelligence