{"action":"Upgrade pimcore/pimcore to 10.5.19 or later.","affected":[{"fixed":"10.5.19","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2023-1515"],"ecosystem":"Packagist","epss":0.00349,"exploited":false,"fixed_versions":["10.5.19"],"ghsa_id":"GHSA-66cm-c7ch-5j8q","id":"tcs_01M5KEWQYVN6Z6DVH14TVYRB36","modified_at":"2024-02-22T05:33:30.594789Z","published_at":"2023-03-20T17:18:33Z","references":["https://osv.dev/vulnerability/GHSA-66cm-c7ch-5j8q","https://github.com/pimcore/pimcore/security/advisories/GHSA-66cm-c7ch-5j8q","https://nvd.nist.gov/vuln/detail/CVE-2023-1515","https://github.com/pimcore/pimcore/pull/14562","https://github.com/pimcore/pimcore/pull/14562.patch","https://github.com/pimcore/pimcore/commit/44c6b37aa649a0e3105fa41f3d74a3e511acf964","https://github.com/pimcore/pimcore","https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-66cm-c7ch-5j8q","url":"https://osv.dev/vulnerability/GHSA-66cm-c7ch-5j8q"}],"summary":"Pimcore vulnerable to Cross-site Scripting (XSS) in Redirects"}