Medium · 6.1 CVE-2021-27940 EUVD-2022-2918GHSA-752c-vfpf-cp2w

openark/orchestrator cross-site scripting vulnerability

Published Mar 3, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows XSS via the orchestrator-msg parameter.

Ecosystem	Package	Affected	Fixed	Record
Go	github.com/openark/orchestrator	< 3.2.4	3.2.4	GHSA-752c-vfpf-cp2w