| Package | Affected versions | Patched versions |
|---|---|---|
| openui5 | ≥ 1.40.0, < 1.44.39≥ 1.50.0, < 1.52.25≥ 1.60.0, < 1.60.6< 1.38.39 | 1.44.391.52.251.60.61.38.39 |
SAPUI5 and OpenUI5, before versions 1.38.39, 1.44.39, 1.52.25, 1.60.6 and 1.63.0, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free