Stored XSS through Run Logs
A stored XSS vulnerability was identified in version 3.19.3 of the software, where terminal output logs are displayed using the `dangerouslySetInnerHTML` function in React. This issue was patched in a subsequent release.
Available publicly on Jul 12 2024
Remediation Steps
- Update to the latest version of the software where this vulnerability is patched.
- Avoid using
dangerouslySetInnerHTMLfor rendering user-generated content. - Implement proper input sanitization and output encoding to prevent XSS attacks.
- Regularly review and test code for security vulnerabilities.
Patch Details
- Fixed Version: N/A
- Patch Commit: N/A
Want more out of Sightline?
Sightline offers even more for premium customers
Go Premium
We have - related security advisories that are available with Sightline Premium.