{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.84.0"}],"component":"xo-server","cve_ids":["CVE-2021-36383"],"ecosystem":"npm","epss":0.00714,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-grvm-gcqf-gh8q","id":"tcs_01M5KFSFADNFB77G0CHHAATNAD","modified_at":"2023-11-08T04:06:13.465015Z","published_at":"2022-05-24T19:07:30Z","references":["https://osv.dev/vulnerability/GHSA-grvm-gcqf-gh8q","https://nvd.nist.gov/vuln/detail/CVE-2021-36383","https://github.com/vatesfr/xen-orchestra/issues/5712","https://github.com/vatesfr/xen-orchestra"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-grvm-gcqf-gh8q#npm/xo-server","url":"https://osv.dev/vulnerability/GHSA-grvm-gcqf-gh8q"}],"summary":"Xen Orchestra Mishandles Authorization"}