SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 62975: The Add Links option in SAS® Home has a cross-site scripting vulnerability

DetailsHotfixAboutRate It

Severity: Medium

Description: SAS Home does not validate URLs added using the Add Links option.

Potential Impact: Users might unknowingly execute malicious code when using an added URL.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Visual AnalyticsMicrosoft® Windows® for x647.37.59.4 TS1M39.4 TS1M6
Linux for x647.37.59.4 TS1M39.4 TS1M6
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.