{"action":"Upgrade pimcore/pimcore to 10.5.21 or later.","affected":[{"fixed":"10.5.21","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2023-2614"],"ecosystem":"Packagist","epss":0.00497,"exploited":false,"fixed_versions":["10.5.21"],"ghsa_id":"GHSA-m6m9-gr85-79vm","id":"tcs_01M5KF58G6C61N7GPNN069SRPX","modified_at":"2024-11-30T05:32:12.984690Z","published_at":"2023-05-10T21:26:32Z","references":["https://osv.dev/vulnerability/GHSA-m6m9-gr85-79vm","https://github.com/pimcore/pimcore/security/advisories/GHSA-m6m9-gr85-79vm","https://nvd.nist.gov/vuln/detail/CVE-2023-2614","https://github.com/pimcore/pimcore/commit/c36ef54ce33f7b5e74b7b0ab9eabfed47c018fc7","https://github.com/pimcore/pimcore","https://huntr.dev/bounties/1a5e6c65-2c5e-4617-9411-5b47a7e743a6"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-m6m9-gr85-79vm","url":"https://osv.dev/vulnerability/GHSA-m6m9-gr85-79vm"}],"summary":"Pimcore Cross-site Scripting (XSS) in name field of Custom Reports"}