{"action":"Upgrade mos/cimage to 0.7.19 or later.","affected":[{"fixed":"0.7.19","introduced":"0"}],"component":"mos/cimage","cve_ids":["CVE-2016-15022"],"ecosystem":"Packagist","epss":0.005,"exploited":false,"fixed_versions":["0.7.19"],"ghsa_id":"GHSA-6hv3-9fqx-8pg5","id":"tcs_01M5KEX447RHEGQ67PK71A2B2N","modified_at":"2024-02-16T08:12:55.459155Z","published_at":"2023-01-29T21:34:04Z","references":["https://osv.dev/vulnerability/GHSA-6hv3-9fqx-8pg5","https://nvd.nist.gov/vuln/detail/CVE-2016-15022","https://github.com/mosbth/cimage/commit/401478c8393989836beeddfeac5ce44570af162b","https://github.com/mosbth/cimage","https://github.com/mosbth/cimage/releases/tag/v0.7.19","https://vuldb.com/?ctiid.219715","https://vuldb.com/?id.219715"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-6hv3-9fqx-8pg5","url":"https://osv.dev/vulnerability/GHSA-6hv3-9fqx-8pg5"}],"summary":"CImage Cross-site Scripting vulnerability"}