{"action":"Upgrade plone-app-contenttypes to 2.2.3 or later.","affected":[{"fixed":"2.2.3","introduced":"0"}],"component":"plone-app-contenttypes","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["2.2.3"],"ghsa_id":"GHSA-f7qw-5fgj-247x","id":"tcs_01M5KFEQHPQNEEA2KTZRGN55A6","modified_at":"2024-12-05T05:40:00.398648Z","published_at":"2022-02-01T00:48:35Z","references":["https://osv.dev/vulnerability/GHSA-f7qw-5fgj-247x","https://github.com/plone/Products.ATContentTypes/security/advisories/GHSA-g4c2-ghfg-g5rh","https://github.com/plone/plone.app.contenttypes/security/advisories/GHSA-f7qw-5fgj-247x","https://github.com/plone/plone.app.contenttypes"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-f7qw-5fgj-247x","url":"https://osv.dev/vulnerability/GHSA-f7qw-5fgj-247x"}],"summary":"Cross-site Scripting and Open Redirect in plone.app.contenttypes"}