{"action":"Upgrade librenms/librenms to 23.9.0 or later.","affected":[{"fixed":"23.9.0","introduced":"0"}],"component":"librenms/librenms","cve_ids":["CVE-2023-4982"],"ecosystem":"Packagist","epss":0.00662,"exploited":false,"fixed_versions":["23.9.0"],"ghsa_id":"GHSA-m6jj-fgmh-3p8r","id":"tcs_01M5KF58BTNEVP41AWRPVYKDFS","modified_at":"2024-02-16T08:11:01.805083Z","published_at":"2023-09-15T03:30:19Z","references":["https://osv.dev/vulnerability/GHSA-m6jj-fgmh-3p8r","https://nvd.nist.gov/vuln/detail/CVE-2023-4982","https://github.com/librenms/librenms/commit/2c5960631c49f7414f61b6d4dcd305b07da05769","https://github.com/librenms/librenms","https://huntr.dev/bounties/d3c2dd8a-883c-400e-a1a7-326c3fd37b9e"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-m6jj-fgmh-3p8r","url":"https://osv.dev/vulnerability/GHSA-m6jj-fgmh-3p8r"}],"summary":"LibreNMS Cross-site Scripting vulnerability"}