{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.7"},{"introduced":"1.2.0","last_affected":"1.2.8"}],"component":"org.apache.myfaces.core:myfaces-core-module","cve_ids":["CVE-2010-2086"],"ecosystem":"Maven","epss":0.02118,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-92cv-wv2c-8899","id":"tcs_01M5N8NTPPK5AB0T574K0RNFBE","modified_at":"2024-02-08T16:11:36.067774Z","published_at":"2022-05-17T05:50:42Z","references":["https://osv.dev/vulnerability/GHSA-92cv-wv2c-8899","https://nvd.nist.gov/vuln/detail/CVE-2010-2086","https://github.com/apache/myfaces","https://www.trustwave.com/spiderlabs/advisories/TWSL2010-001.txt","http://www.blackhat.com/presentations/bh-dc-10/Byrne_David/BlackHat-DC-2010-Byrne-SGUI-slides.pdf"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-92cv-wv2c-8899","url":"https://osv.dev/vulnerability/GHSA-92cv-wv2c-8899"}],"summary":"Apache MyFaces Cross-site Scripting vulnerability"}