Impact There is a potential risk of code execution for Backoffice users when they “preview” SVG files in full screen mode.

Workarounds Server-side file validation is available to strip script tags from file's content during the file upload process.

Impact The Backoffice displays the logout page with a session timeout message before the server session has fully expired, causing users to believe they have been logged out approximately 30 seconds before they actually are.