{"action":"Upgrade pimcore/pimcore to 10.6.4 or later.","affected":[{"fixed":"10.6.4","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2023-3821"],"ecosystem":"Packagist","epss":0.0057,"exploited":false,"fixed_versions":["10.6.4"],"ghsa_id":"GHSA-78q2-cv3p-x9fm","id":"tcs_01M5KEXV86ZKQ680J263ATDD62","modified_at":"2024-02-16T07:54:42.924145Z","published_at":"2023-07-21T15:30:32Z","references":["https://osv.dev/vulnerability/GHSA-78q2-cv3p-x9fm","https://nvd.nist.gov/vuln/detail/CVE-2023-3821","https://github.com/pimcore/pimcore/commit/92811f07d39e4ad95c92003868f5f7309489d79c","https://github.com/pimcore/pimcore","https://huntr.dev/bounties/599ba4f6-c900-4161-9127-f1e6a6e29aaa"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-78q2-cv3p-x9fm","url":"https://osv.dev/vulnerability/GHSA-78q2-cv3p-x9fm"}],"summary":"Pimcore Cross-site Scripting vulnerability"}