{"action":"Upgrade pimcore/pimcore to 10.2.6 or later.","affected":[{"fixed":"10.2.6","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2021-4084"],"ecosystem":"Packagist","epss":0.01611,"exploited":false,"fixed_versions":["10.2.6"],"ghsa_id":"GHSA-8w3x-r6x7-c5r5","id":"tcs_01M5KEZCRBAN3G3ZK5WGF7FZD2","modified_at":"2023-11-08T04:06:49.688913Z","published_at":"2021-12-16T14:28:27Z","references":["https://osv.dev/vulnerability/GHSA-8w3x-r6x7-c5r5","https://nvd.nist.gov/vuln/detail/CVE-2021-4084","https://github.com/pimcore/pimcore/commit/3c2a14e676a57e5d77a16255965988eef48f9065","https://github.com/pimcore/pimcore","https://huntr.dev/bounties/dcb37f19-ba53-4498-b953-d21999279266"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-8w3x-r6x7-c5r5","url":"https://osv.dev/vulnerability/GHSA-8w3x-r6x7-c5r5"}],"summary":"Cross-site Scripting in pimcore"}