npm/@plone/volto CVE-2022-24740: medium 5, EPSS 0.59%
Sudden swap of user auth tokens in Volto
Action: Upgrade @plone/volto to 15.0.0-alpha.0 or later.
npm i @plone/volto@15.0.0-alpha.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 14.0.0-alpha.6 | 15.0.0-alpha.0 | - |
Fixed versions
| 15.0.0-alpha.0 |
Sources
- osv: GHSA-cfhh-xgwq-5r67
- https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67
- https://nvd.nist.gov/vuln/detail/CVE-2022-24740
- https://github.com/plone/volto/pull/3051
- https://github.com/plone/volto
CVE-2022-24740 · published · modified · JSON