CVE-2026-53473

Name of the Vulnerable Software and Affected Versions migration-planner-ui-app (affected versions not specified)

Description A cross-site scripting (XSS) flaw exists where an attacker can register a malicious discovery agent using a specially crafted credentialUrl containing JavaScript code. If an organizational user clicks this link within the user interface, the malicious code executes in their browser session. This can lead to the compromise of the user's Red Hat Single Sign-On (SSO) session, potentially enabling unauthorized API actions and cross-tenant data access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.