Sitecore JSS React Sample Application Information Disclosure Vulnerability
Vulnerability
A high-severity information disclosure vulnerability has been identified in the Sitecore JSS React Sample Application, affecting versions 11.0.0 through 14.0.1. This vulnerability may allow page content intended for one user to be displayed to another user.
Impact
Exploitation of this vulnerability could lead to unauthorized information disclosure, allowing users to see content meant for others.
Remediation
Users can upgrade to Sitecore JSS React Sample Application versions 11.0.4, 12.0.2, 13.2.2, or 14.0.2. After updating, it is recommended to verify that global variables or singletons are not used to store page state in the server-side JavaScript code.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.