Description
ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.5, a cross site scripting (XSS) issue can occur when providing untrusted input to the `redirect.link` property as an argument to the `build(MessagePageOptions)` function. While there is no known workaround at this time, there is a patch in version 0.1.5.
Published: 2022-03-01
Score: 6.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-1359 ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.5, a cross site scripting (XSS) issue can occur when providing untrusted input to the `redirect.link` property as an argument to the `build(MessagePageOptions)` function. While there is no known workaround at this time, there is a patch in version 0.1.5.
Github GHSA Github GHSA GHSA-7f63-h6g3-7cwm Cross Site Scripting (XSS) in @finastra/ssr-pages
History

Wed, 23 Apr 2025 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Finastra Ssr-pages
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2025-04-23T18:59:43.610Z

Reserved: 2022-02-10T00:00:00.000Z

Link: CVE-2022-24717

cve-icon Vulnrichment

Updated: 2024-08-03T04:20:50.172Z

cve-icon NVD

Status : Modified

Published: 2022-03-01T19:15:08.647

Modified: 2024-11-21T06:50:56.513

Link: CVE-2022-24717

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses