Beveiligingsadvies

CVE-2026-35571

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-07 15:26:30

Laatst bijgewerkt 2026-04-08 14:57:05

Toegewezen door GitHub_M

CVSS-score 4.8

Status PUBLISHED

Beschrijving

Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, Mustache navigation templates interpolated configuration-controlled link values directly into href attributes without URL scheme validation. An administrator who could modify the navItems configuration could inject javascript: URIs, enabling stored cross-site scripting (XSS) against other authenticated users viewing the Emissary web interface. This vulnerability is fixed in 8.39.0.

← Alle CVE's bekijken Bekijk op cve.org ↗