Skip to content
OpenAdvisories

Vendor

Finastra

4 known vulnerabilities.

Products

finastra-nodejs-libs 2 ssr-pages 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.8
    CVE-2022-31070

    Potential Sensitive Cookie Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy

    NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to block sensitive cookies (e.g. session cookies) from being forwarded to backend services configured by the application developer…

    Finastra finastra-nodejs-libs @finastra/nestjs-proxy npm
  • Medium 5.8
    CVE-2022-31069

    Potential Authorization Header Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy

    NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to control when Authorization headers should should be forwarded for specific backend services configured by the application devel…

    Finastra finastra-nodejs-libs @finastra/nestjs-proxy npm
  • Medium 6.1
    CVE-2022-24717

    Cross Site Scripting (XSS) in ssr-pages

    ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.5, a cross site scripting (XSS) issue can occur when providing untrusted input to the `redirect.link` property as an argument to the `build(MessagePageO…

    Finastra ssr-pages @finastra/ssr-pages npm