{"action":"Upgrade pimcore/pimcore to 10.6.4 or later.","affected":[{"fixed":"10.6.4","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2023-3822"],"ecosystem":"Packagist","epss":0.00547,"exploited":false,"fixed_versions":["10.6.4"],"ghsa_id":"GHSA-vmpv-qjhq-r463","id":"tcs_01M5KF99CSFJN1EGER6B9PA7CQ","modified_at":"2024-02-16T08:10:08.990893Z","published_at":"2023-07-21T15:30:32Z","references":["https://osv.dev/vulnerability/GHSA-vmpv-qjhq-r463","https://nvd.nist.gov/vuln/detail/CVE-2023-3822","https://github.com/pimcore/pimcore/commit/d75888a9b14baaad591548463cca09dfd1395236","https://github.com/pimcore/pimcore","https://huntr.dev/bounties/2a3a13fe-2a9a-4d1a-8814-fd8ed1e3b1d5"],"severity":{"label":"medium","score":6},"sources":[{"source":"osv","source_id":"GHSA-vmpv-qjhq-r463","url":"https://osv.dev/vulnerability/GHSA-vmpv-qjhq-r463"}],"summary":"Pimcore Cross-site Scripting vulnerability"}