{"action":"Upgrade github.com/mattermost/mattermost-server/v5 to 5.39.0 or later.","affected":[{"fixed":"5.39.0","introduced":"0"}],"component":"github.com/mattermost/mattermost-server/v5","cve_ids":["CVE-2021-37860"],"ecosystem":"Go","epss":0.00631,"exploited":false,"fixed_versions":["5.39.0"],"ghsa_id":"GHSA-hv5f-73mr-7vvj","id":"tcs_01M5KFD2QHJR1MYW1SKFZES939","modified_at":"2024-08-21T15:41:39.956479Z","published_at":"2021-09-23T23:11:06Z","references":["https://osv.dev/vulnerability/GHSA-hv5f-73mr-7vvj","https://nvd.nist.gov/vuln/detail/CVE-2021-37860","https://docs.mattermost.com/install/self-managed-changelog.html#release-v5-39-quality-release","https://github.com/mattermost/mattermost-server","https://mattermost.com/security-updates"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-hv5f-73mr-7vvj","url":"https://osv.dev/vulnerability/GHSA-hv5f-73mr-7vvj"}],"summary":"Cross-site Scripting in Mattermost"}