Description
react-admin is a frontend framework for building browser applications on top of REST/GraphQL APIs. react-admin prior to versions 3.19.12 and 4.7.6, along with ra-ui-materialui prior to 3.19.12 and 4.7.6, are vulnerable to cross-site scripting. All React applications built with react-admin and using the `
Remediation
References
https://github.com/marmelab/react-admin/pull/8644
https://github.com/marmelab/react-admin/pull/8645
https://github.com/marmelab/react-admin/releases/tag/v3.19.12
https://github.com/marmelab/react-admin/releases/tag/v4.7.6
https://github.com/marmelab/react-admin/security/advisories/GHSA-5jcr-82fh-339v
Related Vulnerabilities
CVE-2017-1000219 Vulnerability in npm package windows-cpu
CVE-2023-48309 Vulnerability in npm package next-auth
CVE-2021-39152 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2023-39619 Vulnerability in npm package node-email-check
CVE-2023-33201 Vulnerability in maven package org.bouncycastle:bcprov-jdk15to18