Description
Central Dogma versions prior to 0.64.1 is vulnerable to Cross-Site Scripting (XSS), which could allow for the leakage of user sessions and subsequent authentication bypass.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| LINE | Central Dogma | 0.63.3 – < 0.64.1 | 0.64.1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.linecorp.centraldogma:centraldogma-server | < 0.64.1 | 0.64.1 | GHSA-34q3-p352-c7q8 |