{"action":"Upgrade pimcore/data-hub to 1.2.4 or later.","affected":[{"fixed":"1.2.4","introduced":"0"}],"component":"pimcore/data-hub","cve_ids":["CVE-2022-0955"],"ecosystem":"Packagist","epss":0.00582,"exploited":false,"fixed_versions":["1.2.4"],"ghsa_id":"GHSA-vc5r-xfc4-4x22","id":"tcs_01M5KF91Y65G749J8HCT32S5QJ","modified_at":"2023-12-06T01:01:49.853929Z","published_at":"2022-03-25T00:00:33Z","references":["https://osv.dev/vulnerability/GHSA-vc5r-xfc4-4x22","https://nvd.nist.gov/vuln/detail/CVE-2022-0955","https://github.com/pimcore/data-hub/commit/15d5b57af2466eebd3bbc531ead5dafa35d0a36e","https://github.com/pimcore/data-hub","https://huntr.dev/bounties/708971a6-1e6c-4c51-a411-255caeba51df"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-vc5r-xfc4-4x22","url":"https://osv.dev/vulnerability/GHSA-vc5r-xfc4-4x22"}],"summary":"Cross-site Scripting in Pimcore Datahub"}