Vulners
Lucene search
3 matches found
Cross-site Scripting in Serenity
Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character...
6.1CVSS5.8AI score0.00386EPSS
Exploits0References3Affected Software2
GHSA-5JJQ-8CVJ-V6M9 Cross-site Scripting in Serenity
Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character...
6.1CVSS5.9AI score0.00386EPSS
Exploits0References3
Cross site scripting
Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character...
6.1AI score0.00386EPSS
Exploits0References1
20