CVE-2022-43706
Cross-site scripting (XSS) vulnerability in the Web UI of StackStorm versions prior to 3.8.0 allowed logged in users with write access to pack rules to inject arbitrary script o…
Published: 2022-12-05 · CVSS: 5.4 · CVSS 3.1
Cross-site scripting (XSS) vulnerability in the Web UI of StackStorm versions prior to 3.8.0 allowed logged in users with write access to pack rules to inject arbitrary script or HTML that may be executed in Web UI for other logged in users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7