{"action":"Upgrade xblock-drag-and-drop-v2 to 3.0.0 or later.","affected":[{"fixed":"3.0.0","introduced":"0"}],"component":"xblock-drag-and-drop-v2","cve_ids":["CVE-2022-46147"],"ecosystem":"PyPI","epss":0.0086,"exploited":false,"fixed_versions":["3.0.0"],"ghsa_id":"GHSA-qv6c-367r-3w6q","id":"tcs_01M5KFWNKMMD67576SAK220TZH","modified_at":"2024-11-22T20:46:10.839222Z","published_at":"2022-12-02T22:26:22Z","references":["https://osv.dev/vulnerability/GHSA-qv6c-367r-3w6q","https://github.com/openedx/xblock-drag-and-drop-v2/security/advisories/GHSA-qv6c-367r-3w6q","https://nvd.nist.gov/vuln/detail/CVE-2022-46147","https://github.com/openedx/xblock-drag-and-drop-v2/pull/295#issuecomment-1277693864","https://github.com/openedx/xblock-drag-and-drop-v2/commit/53c4482f9bb6d8c7ccdf5253bd82c84a222b2492","https://github.com/openedx/xblock-drag-and-drop-v2/commit/68887d1b4a44325d2de7573d450e41129ba98b1a","https://github.com/openedx/xblock-drag-and-drop-v2","https://github.com/openedx/xblock-drag-and-drop-v2/releases/tag/v3.0.0","https://github.com/pypa/advisory-database/tree/main/vulns/xblock-drag-and-drop-v2/PYSEC-2022-43175.yaml"],"severity":{"label":"high","score":8.4},"sources":[{"source":"osv","source_id":"GHSA-qv6c-367r-3w6q","url":"https://osv.dev/vulnerability/GHSA-qv6c-367r-3w6q"}],"summary":"XBlock vulnerable to Cross-Site Scripting (XSS)"}