VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Oct 23, 2019· Updated Jun 17, 2026

CVE-2019-18350

CVE-2019-18350

Description

In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • ant-design/Ant Design Pro2 versions
    cpe:2.3:a:ant.design:ant_design_pro:4.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ant.design:ant_design_pro:4.0.0:*:*:*:*:*:*:*
    • (no CPE)range: =4.0.0
  • Ant Design/Ant Design Prodescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.