{"action":"Upgrade pimcore/pimcore to 10.5.21 or later.","affected":[{"fixed":"10.5.21","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2023-2616"],"ecosystem":"Packagist","epss":0.00497,"exploited":false,"fixed_versions":["10.5.21"],"ghsa_id":"GHSA-mhpj-7m7h-8p6x","id":"tcs_01M5KF5KM25R60VATNEHM5AWS6","modified_at":"2023-11-08T04:12:00.480607Z","published_at":"2023-05-11T20:29:01Z","references":["https://osv.dev/vulnerability/GHSA-mhpj-7m7h-8p6x","https://github.com/pimcore/pimcore/security/advisories/GHSA-mhpj-7m7h-8p6x","https://nvd.nist.gov/vuln/detail/CVE-2023-2616","https://github.com/pimcore/pimcore/commit/07a2c95be524c7e20105cef58c5767d4ebb06091","https://github.com/pimcore/pimcore","https://huntr.dev/bounties/564cb512-2bcc-4458-8c20-88110ab45801"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-mhpj-7m7h-8p6x","url":"https://osv.dev/vulnerability/GHSA-mhpj-7m7h-8p6x"}],"summary":"Pimcore Cross-site Scripting (XSS) in Static Routes name field"}