{"action":"Upgrade cockpit-hq/cockpit to 2.6.3 or later.","affected":[{"fixed":"2.6.3","introduced":"0"}],"component":"cockpit-hq/cockpit","cve_ids":["CVE-2023-4422"],"ecosystem":"Packagist","epss":0.00642,"exploited":false,"fixed_versions":["2.6.3"],"ghsa_id":"GHSA-8m65-qq6g-43rr","id":"tcs_01M5KEZ5B0BZWXKP8JQMD1W6AD","modified_at":"2024-02-16T08:18:23.214109Z","published_at":"2023-08-18T21:30:24Z","references":["https://osv.dev/vulnerability/GHSA-8m65-qq6g-43rr","https://nvd.nist.gov/vuln/detail/CVE-2023-4422","https://github.com/cockpit-hq/cockpit/commit/b8dad5e070608bb5e4ec58fabbee101b5af737cf","https://github.com/cockpit-hq/cockpit","https://huntr.dev/bounties/2e12b773-b6a2-48da-a4bb-55d5d1307d2e"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-8m65-qq6g-43rr","url":"https://osv.dev/vulnerability/GHSA-8m65-qq6g-43rr"}],"summary":"Cockpit Cross-site Scripting vulnerability"}