Description

Status Board 1.1.81 has reflected XSS via dashboard.ts.

Remediation

References

https://github.com/jameswlane/status-board/pull/948

Related Vulnerabilities

CVE-2021-21380 Vulnerability in maven package org.xwiki.platform:xwiki-platform-ratings-api

CVE-2022-21169 Vulnerability in npm package express-xss-sanitizer

CVE-2021-32620 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore

CVE-2022-2596 Vulnerability in maven package org.webjars.npm:node-fetch

CVE-2021-37712 Vulnerability in npm package tar

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Patch Third Party Advisory