CVE-2022-24709: 
JavaScript vulnerability analysis and mitigation

@awsui/components-react is the main AWS UI package containing React components with TypeScript definitions designed for user interface development. On February 24, 2022, a high-severity vulnerability (CVE-2022-24709) was identified affecting versions prior to 3.0.367 (GHSA Advisory).

The vulnerability has a CVSS score of 8.8 (High) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. Multiple components in the package were found to be vulnerable to cross-site scripting (XSS) attacks due to inadequate content neutralization. The vulnerability requires user interaction to be exploited but does not require any privileges (GHSA Advisory).

If exploited, this vulnerability could allow attackers to execute malicious scripts in the context of the affected application, potentially leading to unauthorized access to sensitive data, session hijacking, or other malicious actions. The vulnerability affects both data confidentiality and integrity with high severity ratings (GHSA Advisory).

The vulnerability has been patched in version 3.0.367 of @awsui/components-react. Users are advised to upgrade to this version or later to address the security issue (GHSA Advisory).