{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"18.0.0-1","last_affected":"27.1.0-1"}],"component":"org.opennms:opennms","cve_ids":["CVE-2021-25934"],"ecosystem":"Maven","epss":0.01008,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-9hhc-cc6c-99hh","id":"tcs_01M5N8Q4CGPJSYRJKWGATE5YDK","modified_at":"2023-11-08T04:05:17.835882Z","published_at":"2022-05-24T19:03:10Z","references":["https://osv.dev/vulnerability/GHSA-9hhc-cc6c-99hh","https://nvd.nist.gov/vuln/detail/CVE-2021-25934","https://github.com/OpenNMS/opennms/commit/101e3aa06ec9a1f8f266335fc6f5685c062c6117","https://github.com/OpenNMS/opennms/commit/eb08b5ed4c5548f3e941a1f0d0363ae4439fa98c","https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25934"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-9hhc-cc6c-99hh","url":"https://osv.dev/vulnerability/GHSA-9hhc-cc6c-99hh"}],"summary":"OpenNMS Horizon vulnerable to XSS"}