CVE-2025-53543
Kestra allows Stored XSS before 0.22
Résumé
Kestra allows Stored XSS before 0.22
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Kestra is an event-driven orchestration platform. The error message in execution "Overview" tab is vulnerable to stored XSS due to improper handling of HTTP response received. This vulnerability is fixed in 0.22.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov