{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.39.3"}],"component":"wikibase/wikibase","cve_ids":["CVE-2023-37302"],"ecosystem":"Packagist","epss":0.00689,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fmrf-p77g-vv5c","id":"tcs_01M5KF1XN2DEZTVZ0S00SFBRKF","modified_at":"2023-12-06T01:03:07.822659Z","published_at":"2023-06-30T18:31:02Z","references":["https://osv.dev/vulnerability/GHSA-fmrf-p77g-vv5c","https://nvd.nist.gov/vuln/detail/CVE-2023-37302","https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/933649","https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/933650","https://github.com/wikimedia/mediawiki","https://phabricator.wikimedia.org/T339111"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-fmrf-p77g-vv5c","url":"https://osv.dev/vulnerability/GHSA-fmrf-p77g-vv5c"}],"summary":"MediaWiki Cross-site Scripting vulnerability"}