{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.3.3"}],"component":"org.mitre:openid-connect-server","cve_ids":["CVE-2020-5497"],"ecosystem":"Maven","epss":0.02133,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-c2h6-7gm8-cv4w","id":"tcs_01M5N8R6G8ZRNWJF0194CNB4KS","modified_at":"2023-11-08T04:03:55.956159Z","published_at":"2020-04-01T16:35:44Z","references":["https://osv.dev/vulnerability/GHSA-c2h6-7gm8-cv4w","https://nvd.nist.gov/vuln/detail/CVE-2020-5497","https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues/1521","https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/pull/1526","https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/pull/1527","https://www.securitymetrics.com/blog/MITREid-Connect-cross-site-scripting-CVE-2020-5497","http://packetstormsecurity.com/files/156574/MITREid-1.3.3-Cross-Site-Scripting.html","http://seclists.org/fulldisclosure/2020/Feb/25"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-c2h6-7gm8-cv4w","url":"https://osv.dev/vulnerability/GHSA-c2h6-7gm8-cv4w"}],"summary":"XSS in MITREid Connect"}