Vulnerabilidades de Steedos

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Steedos: 1 registro(s), com severidade, exploração e correções.

Steedos-platform 1

Somente exploradas (KEV) →

CVE-2026-91922 Média · 6.1 CWE-79 15/09/2026

Steedos Platform through 3.0.15-beta.47 Reflected XSS via page render

Steedos Platform through 3.0.15-beta.47 contains a reflected cross-site scripting vulnerability in the anonymous /api/page/render endpoint that fails to properly escape query parameters in inline script elements. Attackers can craft malicious links with script-terminating sequences in the schemaApi or data parameters to execute arbitrary JavaScript in victim sessions and steal X-Auth-Token credentials.