CVE-2025-53543 — Kestra allows Stored XSS before 0.22
Kestra is an event-driven orchestration platform. The error message in execution "Overview" tab is vulnerable to stored XSS due to improper handling of HTTP response received. T…
Published: 2025-07-07 · CVSS: 4.2 · CVSS 3.1
Kestra is an event-driven orchestration platform. The error message in execution "Overview" tab is vulnerable to stored XSS due to improper handling of HTTP response received. This vulnerability is fixed in 0.22.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7