CVE-2024-58394

Retool versions before 3.88.0 are vulnerable to a cross-site scripting (XSS) vulnerability. The root cause involves the /api/imageProxy endpoint, which allows unauthenticated attackers to proxy malicious SVG files from an external host. Because these files are served from the Retool origin withou...