CVE-2025-53543

Kestra is an event-driven orchestration platform. The error message in execution "Overview" tab is vulnerable to stored XSS due to improper handling of HTTP response received. This vulnerability is fixed in 0.22.0.
CVSS

No CVSS.

Configurations

No configuration.

History

07 Jul 2025, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-07 20:15

Updated : 2025-07-07 20:15


NVD link : CVE-2025-53543

Mitre link : CVE-2025-53543


JSON object : View

Products Affected

No product.

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')