PT-2023-33008 · Woodland · Woodland

Publicado

2023-12-15

·

Atualizado

2023-12-15

Nenhuma

Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
Name of the Vulnerable Software and Affected Versions woodland versions prior to 7.17.4
Description The issue affects users of the SPS Select component when the options prop is populated from user input, potentially leading to XSS attacks. If these options are stored, it could result in a stored XSS.
Recommendations For versions prior to 7.17.4, upgrade to version 7.17.4 or higher to resolve the issue. As a temporary workaround, consider sanitizing your options yourself, including those currently stored in databases, although this is not recommended.

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

GHSA-CFXH-FRX4-9GJG

Produtos afetados

Woodland