{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.0.15"}],"component":"opensolutions/vimbadmin","cve_ids":["CVE-2017-5870"],"ecosystem":"Packagist","epss":0.01012,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jj4j-cwgq-fx7g","id":"tcs_01M5KF4MKPTYSPQ1GS38ZS0TSE","modified_at":"2024-04-25T22:56:47.966701Z","published_at":"2022-05-17T02:43:11Z","references":["https://osv.dev/vulnerability/GHSA-jj4j-cwgq-fx7g","https://nvd.nist.gov/vuln/detail/CVE-2017-5870","https://github.com/opensolutions/ViMbAdmin","https://web.archive.org/web/20201208133828/https://sysdream.com/news/lab/2017-05-03-cve-2017-5870-multiple-xss-vulnerabilities-in-vimbadmin","http://www.openwall.com/lists/oss-security/2017/05/03/8"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-jj4j-cwgq-fx7g","url":"https://osv.dev/vulnerability/GHSA-jj4j-cwgq-fx7g"}],"summary":"ViMbAdmin Cross-site Scripting Vulnerabilities"}