{"action":"Upgrade symbiote/silverstripe-queuedjobs to 3.0.2 or later.","affected":[{"fixed":"3.0.2","introduced":"3.0.0"},{"fixed":"3.1.4","introduced":"3.1.0"},{"fixed":"4.0.7","introduced":"4.0.0"},{"fixed":"4.1.2","introduced":"4.1.0"},{"fixed":"4.2.4","introduced":"4.2.0"},{"fixed":"4.3.3","introduced":"4.3.0"},{"fixed":"4.4.3","introduced":"4.4.0"},{"fixed":"4.5.1","introduced":"4.5.0"},{"fixed":"4.6.4","introduced":"4.6.0"}],"component":"symbiote/silverstripe-queuedjobs","cve_ids":["CVE-2021-27938"],"ecosystem":"Packagist","epss":0.00751,"exploited":false,"fixed_versions":["3.0.2","3.1.4","4.0.7","4.1.2","4.2.4","4.3.3","4.4.3","4.5.1","4.6.4"],"ghsa_id":"GHSA-xgpf-p52j-pf7m","id":"tcs_01M5KFB1G2SGB9JCAK6AK5DP8D","modified_at":"2024-12-02T05:49:22.917580Z","published_at":"2021-03-24T17:42:02Z","references":["https://osv.dev/vulnerability/GHSA-xgpf-p52j-pf7m","https://nvd.nist.gov/vuln/detail/CVE-2021-27938","https://github.com/FriendsOfPHP/security-advisories/blob/master/symbiote/silverstripe-queuedjobs/CVE-2021-27938.yaml","https://github.com/symbiote/silverstripe-queuedjobs/releases","https://www.silverstripe.org/download/security-releases/cve-2021-27938"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-xgpf-p52j-pf7m","url":"https://osv.dev/vulnerability/GHSA-xgpf-p52j-pf7m"}],"summary":"XSS in CreateQueuedJobTask"}