{"action":"Upgrade org.apache.isis.core:isis-core to 2.0.0-M9 or later.","affected":[{"fixed":"2.0.0-M9","introduced":"0"}],"component":"org.apache.isis.core:isis-core","cve_ids":["CVE-2022-42466"],"ecosystem":"Maven","epss":0.01444,"exploited":false,"fixed_versions":["2.0.0-M9"],"ghsa_id":"GHSA-7pfc-cc9x-8p4m","id":"tcs_01M5N8JSCY8D605BTG8HTFEBSV","modified_at":"2023-11-08T04:10:39.437553Z","published_at":"2022-10-19T12:00:18Z","references":["https://osv.dev/vulnerability/GHSA-7pfc-cc9x-8p4m","https://nvd.nist.gov/vuln/detail/CVE-2022-42466","https://github.com/apache/isis/commit/30f94df14ea47cea3d10d468a1230fb96a749743","https://github.com/apache/isis/commit/33de85d7e40a01f120d8de2adf04d47687362bdd","https://github.com/apache/isis/commit/342255124635013194f63c41a7639f979b3340e8","https://github.com/apache/isis/commit/a44d53f24a60bcbcbf3919d1b251d5d1e96ba3c2","https://github.com/apache/isis/commit/c6e9b392de073d1050b56d8209b7c3079d58c600","https://github.com/apache/isis/commit/cc94a9965a82ba8faac1b151777c44061b178673","https://github.com/apache/isis","https://issues.apache.org/jira/browse/ISIS-3240","https://lists.apache.org/thread/83ftj5jgtv3mbm28w3trjyvd591jztrz","http://www.openwall.com/lists/oss-security/2022/10/19/2"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-7pfc-cc9x-8p4m","url":"https://osv.dev/vulnerability/GHSA-7pfc-cc9x-8p4m"}],"summary":"Apache Isis Cross-site Scripting vulnerability"}