{"action":"Upgrade github.com/sourcegraph/sourcegraph to 3.14.4 or later.","affected":[{"fixed":"3.14.4","introduced":"0"},{"fixed":"3.15.1","introduced":"3.15.0"}],"component":"github.com/sourcegraph/sourcegraph","cve_ids":["CVE-2020-12283"],"ecosystem":"Go","epss":0.01333,"exploited":false,"fixed_versions":["3.14.4","3.15.1"],"ghsa_id":"GHSA-mx43-r985-5h4m","id":"tcs_01M5KFGKF64CAN103W1C3X1ZKQ","modified_at":"2023-11-08T04:02:09.885872Z","published_at":"2021-12-20T18:12:47Z","references":["https://osv.dev/vulnerability/GHSA-mx43-r985-5h4m","https://github.com/sourcegraph/sourcegraph/security/advisories/GHSA-mx43-r985-5h4m","https://nvd.nist.gov/vuln/detail/CVE-2020-12283","https://github.com/sourcegraph/sourcegraph/pull/10167","https://github.com/sourcegraph/sourcegraph/commit/c0f48172e815c7f66471a38f0a06d1fc32a77a64","https://github.com/sourcegraph/sourcegraph","https://github.com/sourcegraph/sourcegraph/blob/master/CHANGELOG.md","https://github.com/sourcegraph/sourcegraph/compare/v3.15.0...v3.15.1","https://securitylab.github.com/advisories/GHSL-2020-085-sourcegraph"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-mx43-r985-5h4m","url":"https://osv.dev/vulnerability/GHSA-mx43-r985-5h4m"}],"summary":"Open redirect vulnerability in Sourcegraph"}