{"action":"Upgrade org.apache.james.hupa:hupa-parent to 0.0.3 or later.","affected":[{"fixed":"0.0.3","introduced":"0"}],"component":"org.apache.james.hupa:hupa-parent","cve_ids":["CVE-2012-3536"],"ecosystem":"Maven","epss":0.01917,"exploited":false,"fixed_versions":["0.0.3"],"ghsa_id":"GHSA-7crp-p2vc-69r7","id":"tcs_01M5N8J6VX93K9HHMVADMRHDCZ","modified_at":"2024-02-16T08:12:23.501997Z","published_at":"2022-05-14T03:37:10Z","references":["https://osv.dev/vulnerability/GHSA-7crp-p2vc-69r7","https://nvd.nist.gov/vuln/detail/CVE-2012-3536","https://github.com/apache/james-hupa/commit/aff28a8117a49969b0fc8cc9926c19fa90146d8d","https://james.apache.org/hupa/index.html","http://svn.apache.org/viewvc?view=revision&revision=1373762"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-7crp-p2vc-69r7","url":"https://osv.dev/vulnerability/GHSA-7crp-p2vc-69r7"}],"summary":"Apache James Hupa Webmail application Cross-site Scripting Vulnerabilities"}