{"action":"Upgrade neos/flow to 1.1.1 or later.","affected":[{"fixed":"1.1.1","introduced":"1.1.0"},{"fixed":"2.0.1","introduced":"2.0.0"}],"component":"neos/flow","cve_ids":["CVE-2013-7082"],"ecosystem":"Packagist","epss":0.01187,"exploited":false,"fixed_versions":["1.1.1","2.0.1"],"ghsa_id":"GHSA-vc74-c4m6-9979","id":"tcs_01M5KF921B3C05J0NA31NDSM0B","modified_at":"2024-12-03T06:08:33.389051Z","published_at":"2022-05-17T01:29:43Z","references":["https://osv.dev/vulnerability/GHSA-vc74-c4m6-9979","https://nvd.nist.gov/vuln/detail/CVE-2013-7082","https://exchange.xforce.ibmcloud.com/vulnerabilities/89614","https://github.com/FriendsOfPHP/security-advisories/blob/master/neos/flow/CVE-2013-7082.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/flow/CVE-2013-7082.yaml","https://www.neos.io/blog/flow-sa-2013-001.html","http://osvdb.org/100825","http://secunia.com/advisories/55996","http://typo3.org/teams/security/security-bulletins/typo3-flow/typo3-flow-sa-2013-001"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vc74-c4m6-9979","url":"https://osv.dev/vulnerability/GHSA-vc74-c4m6-9979"}],"summary":"TYPO3 Flow Cross-site scripting (XSS) vulnerability"}