Description
This security advisory relates to a capability for an attacker to exploit a reflected cross-site scripting vulnerability when using the @keystone-6/auth package.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 37.0.0
References
Could your website be exposed too?
SmartScanner can check your website for Reflected cross-site scripting (XSS) vulnerability and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability - CVE-2024-43407
- VvvebJs Reflected Cross-Site Scripting (XSS) vulnerability - CVE-2024-29271
- wangEditor was discovered to contain a cross-site scripting (XSS) vulnerability via the image upload function - CVE-2022-25037
- CKEditor5 cross-site scripting vulnerability caused by the editor instance destroying process - @ckeditor/ckeditor5-html-support - CVE-2022-31175
You might also like:
See something that needs correcting? Let us knowUpdated February 03, 2023