{"action":"Upgrade io.goobi.viewer:viewer-core to 23.03 or later.","affected":[{"fixed":"23.03","introduced":"0"}],"component":"io.goobi.viewer:viewer-core","cve_ids":["CVE-2023-29014"],"ecosystem":"Maven","epss":0.00443,"exploited":false,"fixed_versions":["23.03"],"ghsa_id":"GHSA-7v7g-9vx6-vcg2","id":"tcs_01M5N8K75HE2EMQ8TTH5ZETVHA","modified_at":"2026-09-10T03:49:53.617747318Z","published_at":"2023-04-07T19:22:41Z","references":["https://osv.dev/vulnerability/GHSA-7v7g-9vx6-vcg2","https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-7v7g-9vx6-vcg2","https://nvd.nist.gov/vuln/detail/CVE-2023-29014","https://github.com/intranda/goobi-viewer-core/commit/c29efe60e745a94d03debc17681c4950f3917455","https://github.com/intranda/goobi-viewer-core"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-7v7g-9vx6-vcg2","url":"https://osv.dev/vulnerability/GHSA-7v7g-9vx6-vcg2"}],"summary":"Goobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameter"}