Approved changes feed: RSS · Atom

cpe:2.3:a:aws:awsui-documentation:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAws (e6707f00-6abb-51df-808c-9e3417305027)
ProductAwsui Documentation (8b9a2b81-006c-5ad6-bffe-2e95f0834208)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-24709 vulnerable 2026-06-03 14:46:31.002788 Cross site scripting in @awsui/components-react
HIGH (8.8)
@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Users are advised to upgrade to version 3.0.367 or later. There are no known workarounds for this issue.
Published: 2022-02-24T19:55:11.000Z
Updated: 2025-04-23T19:00:34.473Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.