{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.1.142"}],"component":"@scrypted/core","cve_ids":["CVE-2023-47623"],"ecosystem":"npm","epss":0.00424,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-ww7p-8gfg-v82r","id":"tcs_01M5KGG5K231PF82XF7P20RRBC","modified_at":"2024-08-05T21:58:56.795026Z","published_at":"2024-08-05T21:29:22Z","references":["https://osv.dev/vulnerability/GHSA-ww7p-8gfg-v82r","https://nvd.nist.gov/vuln/detail/CVE-2023-47623","https://github.com/koush/scrypted","https://github.com/koush/scrypted/blob/v0.55.0/plugins/core/ui/src/Login.vue#L79","https://securitylab.github.com/advisories/GHSL-2023-218_GHSL-2023-219_scrypted"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-ww7p-8gfg-v82r","url":"https://osv.dev/vulnerability/GHSA-ww7p-8gfg-v82r"}],"summary":"Scrypted Cross-site Scripting vulnerability"}