{"action":"Upgrade django-helpdesk to 0.3.1 or later.","affected":[{"fixed":"0.3.1","introduced":"0"}],"component":"django-helpdesk","cve_ids":["CVE-2021-3945"],"ecosystem":"PyPI","epss":0.01008,"exploited":false,"fixed_versions":["0.3.1"],"ghsa_id":"GHSA-vx6v-xg64-pmr8","id":"tcs_01M5KG12CHT6SPCDABPTM305EJ","modified_at":"2024-09-16T22:21:52.336807Z","published_at":"2021-11-15T23:12:41Z","references":["https://osv.dev/vulnerability/GHSA-vx6v-xg64-pmr8","https://nvd.nist.gov/vuln/detail/CVE-2021-3945","https://github.com/django-helpdesk/django-helpdesk/commit/2c7065e0c4296e0c692fb4a7ee19c7357583af30","https://github.com/django-helpdesk/django-helpdesk/commit/44abb197120a843cce5b5fe8276e4a44b8bb2f48","https://github.com/advisories/GHSA-vx6v-xg64-pmr8","https://github.com/django-helpdesk/django-helpdesk","https://github.com/pypa/advisory-database/tree/main/vulns/django-helpdesk/PYSEC-2021-430.yaml","https://huntr.dev/bounties/745f483c-70ed-441f-ab2e-7ac1305439a4"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-vx6v-xg64-pmr8","url":"https://osv.dev/vulnerability/GHSA-vx6v-xg64-pmr8"}],"summary":"Cross-site Scripting in django-helpdesk"}