{"action":"Upgrade ibexa/admin-ui to 4.6.14 or later.","affected":[{"fixed":"4.6.14","introduced":"4.6.0"}],"component":"ibexa/admin-ui","cve_ids":["CVE-2024-53864"],"ecosystem":"Packagist","epss":0.00532,"exploited":false,"fixed_versions":["4.6.14"],"ghsa_id":"GHSA-8w3p-gf85-qcch","id":"tcs_01M5KEZCGNB2VR1MXN9JWZDFQP","modified_at":"2024-12-02T18:57:24.171379Z","published_at":"2024-12-02T18:34:45Z","references":["https://osv.dev/vulnerability/GHSA-8w3p-gf85-qcch","https://github.com/ibexa/admin-ui/security/advisories/GHSA-8w3p-gf85-qcch","https://nvd.nist.gov/vuln/detail/CVE-2024-53864","https://github.com/ibexa/admin-ui/commit/8ec824a8cf06c566ed88e4c21cc66f7ed42649fc","https://developers.ibexa.co/security-advisories/ibexa-sa-2024-006-vulnerabilities-in-content-name-pattern-commerce-shop-and-varnish-vhost-templates","https://doc.ibexa.co/en/latest/update_and_migration/from_4.6/update_from_4.6/#v4614","https://github.com/ibexa/admin-ui"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-8w3p-gf85-qcch","url":"https://osv.dev/vulnerability/GHSA-8w3p-gf85-qcch"},{"source":"nvd","source_id":"CVE-2024-53864","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53864"}],"summary":"Ibexa Admin UI vulnerable to Cross-site Scripting in a field that is used in the Content name pattern"}