PT-2025-28255 · Kestra · Kestra

Name of the Vulnerable Software and Affected Versions: Kestra versions prior to 0.22.0 Description: The issue concerns an event-driven orchestration platform where the error message in the execution "Overview" tab is vulnerable to stored XSS due to improper handling of HTTP responses...