GHSA-7F63-H6G3-7CWM Cross Site Scripting (XSS) in @finastra/ssr-pages

A cross site scripting XSS issue can occur when providing untrusted input to the redirect.link property as an argument to the buildMessagePageOptions function. References - https://github.com/Finastra/ssr-pages/pull/2 -...

Cross site scripting

ssr-pages is an HTML page builder for the purpose of server-side rendering SSR. In versions prior to 0.1.5, a cross site scripting XSS issue can occur when providing untrusted input to the redirect.link property as an argument to the buildMessagePageOptions function. While there is no known...

CVE-2022-24718

ssr-pages is an HTML page builder for the purpose of server-side rendering SSR. In versions prior to 0.1.4, a path traversal issue can occur when providing untrusted input to the "svg" property as an argument to the "buildMessagePageOptions" function. While there is no known workaround at this...

CVE-2022-24717

ssr-pages is an HTML page builder for the purpose of server-side rendering SSR. In versions prior to 0.1.5, a cross site scripting XSS issue can occur when providing untrusted input to the "redirect.link" property as an argument to the "buildMessagePageOptions" function. While there is no known...

PT-2022-16826

Name of the Vulnerable Software and Affected Versions ssr-pages versions prior to 0.1.4 Description ssr-pages is an HTML page builder for the purpose of server-side rendering SSR. A path traversal issue can occur when providing untrusted input to the svg property as an argument to the...

CVE-2022-24718: Improper Limitation of a Pathname to a Restricted Directory

ssr-pages is an HTML page builder for the purpose of server-side rendering SSR. In versions prior to 0.1.4, a path traversal issue can occur when providing untrusted input to the svg property as an argument to the buildMessagePageOptions function. While there is no known workaround at this time,...

CVE-2022-24717: Improper Neutralization of Input During Web Page Generation

ssr-pages is an HTML page builder for the purpose of server-side rendering SSR. In versions prior to 0.1.5, a cross site scripting XSS issue can occur when providing untrusted input to the redirect.link property as an argument to the buildMessagePageOptions function. While there is no known...

PT-2022-16825

Name of the Vulnerable Software and Affected Versions ssr-pages versions prior to 0.1.5 Description A cross site scripting XSS issue can occur when providing untrusted input to the redirect.link property as an argument to the buildMessagePageOptions function. This issue affects the ssr-pages HTML...