{"action":"Upgrade @novnc/novnc to 0.6.2 or later.","affected":[{"fixed":"0.6.2","introduced":"0"}],"component":"@novnc/novnc","cve_ids":["CVE-2017-18635"],"ecosystem":"npm","epss":0.04788,"exploited":false,"fixed_versions":["0.6.2"],"ghsa_id":"GHSA-49rv-g7w5-m8xx","id":"tcs_01M5KF00NV0SCP7N8PGT5N2WYD","modified_at":"2023-11-08T03:59:16.468972Z","published_at":"2020-08-28T21:24:59Z","references":["https://osv.dev/vulnerability/GHSA-49rv-g7w5-m8xx","https://nvd.nist.gov/vuln/detail/CVE-2017-18635","https://github.com/novnc/noVNC/issues/748","https://github.com/novnc/noVNC/commit/6048299a138e078aed210f163111698c8c526a13#diff-286f7dc7b881e942e97cd50c10898f03L534","https://access.redhat.com/errata/RHSA-2020:0754","https://bugs.launchpad.net/horizon/+bug/1656435","https://github.com/ShielderSec/cve-2017-18635","https://github.com/novnc/noVNC","https://github.com/novnc/noVNC/releases/tag/v0.6.2","https://lists.debian.org/debian-lts-announce/2019/10/msg00004.html","https://lists.debian.org/debian-lts-announce/2021/12/msg00024.html","https://snyk.io/vuln/SNYK-JS-NOVNCNOVNC-469136","https://usn.ubuntu.com/4522-1","https://www.npmjs.com/advisories/1204","https://www.shielder.it/blog/exploiting-an-old-novnc-xss-cve-2017-18635-in-openstack"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-49rv-g7w5-m8xx","url":"https://osv.dev/vulnerability/GHSA-49rv-g7w5-m8xx"}],"summary":"Cross-Site Scripting in @novnc/novnc"}