CVE-2022-24717

2022-03-0119:15:08

Google

osv.dev

ssr-pages

html

xss

vulnerability

patch

version 0.1.5

EPSS

0.001

Percentile

34.0%

JSON

ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.5, a cross site scripting (XSS) issue can occur when providing untrusted input to the redirect.link property as an argument to the build(MessagePageOptions) function. While there is no known workaround at this time, there is a patch in version 0.1.5.