{"action":"Upgrade simplesamlphp/simplesamlphp-module-openidprovider to 0.9.0 or later.","affected":[{"fixed":"0.9.0","introduced":"0"}],"component":"simplesamlphp/simplesamlphp-module-openidprovider","cve_ids":["CVE-2010-10008"],"ecosystem":"Packagist","epss":0.00563,"exploited":false,"fixed_versions":["0.9.0"],"ghsa_id":"GHSA-chgc-rqjr-46gg","id":"tcs_01M5KF10GRW14MP4HH4929BFSK","modified_at":"2024-03-01T14:28:08Z","published_at":"2023-01-17T09:30:24Z","references":["https://osv.dev/vulnerability/GHSA-chgc-rqjr-46gg","https://nvd.nist.gov/vuln/detail/CVE-2010-10008","https://github.com/simplesamlphp/simplesamlphp-module-openidprovider/commit/8365d48c863cf06ccf1465cc0a161cefae29d69d","https://github.com/simplesamlphp/simplesamlphp-module-openidprovider","https://github.com/simplesamlphp/simplesamlphp-module-openidprovider/releases/tag/v0.9.0","https://vuldb.com/?ctiid.218473","https://vuldb.com/?id.218473"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-chgc-rqjr-46gg","url":"https://osv.dev/vulnerability/GHSA-chgc-rqjr-46gg"}],"summary":"simplesamlphp-module-openidprovider Cross Site Scripting vulnerability"}