{"action":"Upgrade datatables to 1.10.10 or later.","affected":[{"fixed":"1.10.10","introduced":"0"}],"component":"datatables","cve_ids":["CVE-2015-6584"],"ecosystem":"npm","epss":0.02679,"exploited":false,"fixed_versions":["1.10.10"],"ghsa_id":"GHSA-4mv4-gmmf-q382","id":"tcs_01M5KEV4RE43BQKNXCDZCXGZ75","modified_at":"2024-12-03T06:08:04.425385Z","published_at":"2020-08-31T22:42:29Z","references":["https://osv.dev/vulnerability/GHSA-4mv4-gmmf-q382","https://nvd.nist.gov/vuln/detail/CVE-2015-6584","https://github.com/DataTables/DataTables/issues/602","https://github.com/DataTables/DataTablesSrc/commit/ccf86dc5982bd8e16d","https://github.com/DataTables/DataTables","https://github.com/DataTables/DataTablesSrc/commits/1.10.10?after=9780a3693572757d87bf70e48bd7555faf974f28+34&branch=1.10.10&qualified_name=refs%2Ftags%2F1.10.10","https://www.netsparker.com/cve-2015-6384-xss-vulnerability-identified-in-datatables","https://www.npmjs.com/advisories/5","http://packetstormsecurity.com/files/133555/DataTables-1.10.8-Cross-Site-Scripting.html","http://seclists.org/fulldisclosure/2015/Sep/37","http://www.securityfocus.com/archive/1/536437/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/536437/100/0/threaded"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-4mv4-gmmf-q382","url":"https://osv.dev/vulnerability/GHSA-4mv4-gmmf-q382"}],"summary":"DataTable Vulnerable to Cross-Site Scripting"}