{"action":"Upgrade org.geoserver:gs-gwc to 2.23.4 (2.23.x) or 2.24.1 (2.24.x) or later.","affected":[{"fixed":"2.24.1","introduced":"2.24.0"},{"fixed":"2.23.4","introduced":"0"}],"component":"org.geoserver:gs-gwc","cve_ids":["CVE-2024-23821"],"ecosystem":"Maven","epss":0.00405,"exploited":false,"fixed_versions":["2.24.1","2.23.4"],"ghsa_id":"GHSA-88wc-fcj9-q3r9","id":"tcs_01M5N8MB78Q7B93JRJR3YRPX6E","modified_at":"2026-09-10T03:50:00.329413727Z","published_at":"2024-03-20T15:18:21Z","references":["https://osv.dev/vulnerability/GHSA-88wc-fcj9-q3r9","https://github.com/geoserver/geoserver/security/advisories/GHSA-88wc-fcj9-q3r9","https://nvd.nist.gov/vuln/detail/CVE-2024-23821","https://github.com/GeoWebCache/geowebcache/issues/1171","https://github.com/GeoWebCache/geowebcache/pull/1173","https://github.com/geoserver/geoserver"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-88wc-fcj9-q3r9","url":"https://osv.dev/vulnerability/GHSA-88wc-fcj9-q3r9"}],"summary":"GeoServer's GWC Demos Page vulnerable to Stored Cross-Site Scripting (XSS)"}