{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.55.0"}],"component":"@scrypted/server","cve_ids":["CVE-2023-47620"],"ecosystem":"npm","epss":0.00475,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xmhh-xrcc-mx36","id":"tcs_01M5KGJC7EC953FMX3DVMYQBXD","modified_at":"2024-08-05T21:58:56.706943Z","published_at":"2024-08-05T21:29:22Z","references":["https://osv.dev/vulnerability/GHSA-xmhh-xrcc-mx36","https://nvd.nist.gov/vuln/detail/CVE-2023-47620","https://github.com/koush/scrypted","https://github.com/koush/scrypted/blob/71cbe83a2a20f743342df695ca7b98482b73e60f/server/src/plugin/plugin-http.ts#L45","https://securitylab.github.com/advisories/GHSL-2023-218_GHSL-2023-219_scrypted"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-xmhh-xrcc-mx36","url":"https://osv.dev/vulnerability/GHSA-xmhh-xrcc-mx36"}],"summary":"Scrypted Cross-site Scripting vulnerability"}