{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"7.0.13"}],"component":"snipe/snipe-it","cve_ids":["CVE-2024-51093"],"ecosystem":"Packagist","epss":0.00429,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hw9x-8m75-4vjq","id":"tcs_01M5KF3Z375NNJ3S11HPVE4VPQ","modified_at":"2024-11-19T00:12:17.892562Z","published_at":"2024-11-12T21:30:55Z","references":["https://osv.dev/vulnerability/GHSA-hw9x-8m75-4vjq","https://nvd.nist.gov/vuln/detail/CVE-2024-51093","https://gist.githubusercontent.com/Tommywarren/ca70f1c43f4ec34dc19cd13459535780/raw/d13192ae50bc7c024b922412dfa3f530faa8d5db/CVE-2024-51093","https://github.com/snipe/snipe-it"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-hw9x-8m75-4vjq","url":"https://osv.dev/vulnerability/GHSA-hw9x-8m75-4vjq"}],"summary":"Cross Site Scripting vulnerability in Snipe-IT"}