{"action":"Upgrade pimcore/pimcore to 10.6.8 or later.","affected":[{"fixed":"10.6.8","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2023-4453"],"ecosystem":"Packagist","epss":0.00582,"exploited":false,"fixed_versions":["10.6.8"],"ghsa_id":"GHSA-599v-h3q5-g6r9","id":"tcs_01M5KEVVXJ7C7246RDR7V8NGWF","modified_at":"2024-02-16T07:57:15.038889Z","published_at":"2023-08-21T20:41:09Z","references":["https://osv.dev/vulnerability/GHSA-599v-h3q5-g6r9","https://github.com/pimcore/pimcore/security/advisories/GHSA-599v-h3q5-g6r9","https://nvd.nist.gov/vuln/detail/CVE-2023-4453","https://github.com/pimcore/pimcore/commit/234c0c02ea7502071b00ab673fbe4a6ac253080e","https://github.com/pimcore/pimcore","https://huntr.dev/bounties/245a8785-0fc0-4561-b181-fa20f869d993"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-599v-h3q5-g6r9","url":"https://osv.dev/vulnerability/GHSA-599v-h3q5-g6r9"}],"summary":"Pimcore Cross-site Scripting (XSS) vulnerability in DataObject datetime fields"}