Impact There is a potential risk of code execution for Backoffice users when they “preview” SVG files in full screen mode.

Workarounds Server-side file validation is available to strip script tags from file's content during the file upload process.

Impact The Backoffice displays the logout page with a session timeout message before the server session has fully expired, causing users to believe they have been logged out approximately 30 seconds before they actually are.

Impact During an explicit sign-out, the server session is not fully terminated.