Resolved on April 4, 2025, affecting JavaScript Client.
We received a report from a third party security researching about a XSS vulnerability of our Javascript Web-Client when using the Preview and Debug Mode on April 3rd at 9am CEST. We fixed the issue within the hour of receiving the report and deployed the fixed version right away. We've informed all customers that are using our JavaScript Web-Client by email. There is nothing you need to do on your side. You can safely continue using our JavaScript Web-Client. To our knowledge, the XSS vulnerability was not utilized in any attack.
Affected components
Update timeline
- resolved Apr 04, 2025, 08:28 AM UTC
We received a report from a third party security researching about a XSS vulnerability of our Javascript Web-Client when using the Preview and Debug Mode on April 3rd at 9am CEST. We fixed the issue within the hour of receiving the report and deployed the fixed version right away. We've informed all customers that are using our JavaScript Web-Client by email. There is nothing you need to do on your side. You can safely continue using our JavaScript Web-Client. To our knowledge, the XSS vulnerability was not utilized in any attack.
Your product runs on more than Refiner
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services