{"action":"Upgrade github.com/apache/incubator-answer to 1.3.0 or later.","affected":[{"fixed":"1.3.0","introduced":"0"}],"component":"github.com/apache/incubator-answer","cve_ids":["CVE-2024-29217"],"ecosystem":"Go","epss":0.00966,"exploited":false,"fixed_versions":["1.3.0"],"ghsa_id":"GHSA-cvqr-mwh6-2vc6","id":"tcs_01M5KF7XN6PB0JSSEREKMR90CF","modified_at":"2025-02-13T19:00:40Z","published_at":"2024-04-21T18:30:36Z","references":["https://osv.dev/vulnerability/GHSA-cvqr-mwh6-2vc6","https://nvd.nist.gov/vuln/detail/CVE-2024-29217","https://github.com/apache/incubator-answer","https://lists.apache.org/thread/nc0g1borr0d3wx25jm39pn7nyf268n0x","http://www.openwall.com/lists/oss-security/2024/04/19/1"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-cvqr-mwh6-2vc6","url":"https://osv.dev/vulnerability/GHSA-cvqr-mwh6-2vc6"}],"summary":"Apache Answer: XSS vulnerability when changing personal website"}