~ / search / GHSA-752c-vfpf-cp2w

GHSA-752c-vfpf-cp2w

openark/orchestrator cross-site scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-27940

Packages

EcosystemPackageAffectedFixed in
Go github.com/openark/orchestrator < 3.2.4 3.2.4

Details

As written in the advisory (Markdown source, shown as plain text).

resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows XSS via the orchestrator-msg parameter.

References

External links from the advisory. They lead to third-party sites.