Go modules package
github.com/temporalio/ui-server/v2
pkg:golang/github.com/temporalio/ui-server/v2
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-2435 | Med | 4.3 | < 2.25.0 | 2.25.0 | Apr 2, 2024 | For an attacker with pre-existing access to send a signal to a workflow, the attacker can make the signal name a script that executes when a victim views that signal. The XSS is in the timeline page displaying the workflow execution details of the workflow that was sent the craft |
- affected < 2.25.0fixed 2.25.0
For an attacker with pre-existing access to send a signal to a workflow, the attacker can make the signal name a script that executes when a victim views that signal. The XSS is in the timeline page displaying the workflow execution details of the workflow that was sent the craft