{"action":"Upgrade org.opennms:opennms-webapp to 32.0.2 or later.","affected":[{"fixed":"32.0.2","introduced":"31.0.8"}],"component":"org.opennms:opennms-webapp","cve_ids":["CVE-2023-40312"],"ecosystem":"Maven","epss":0.00643,"exploited":false,"fixed_versions":["32.0.2"],"ghsa_id":"GHSA-chgr-j2p9-jjh8","id":"tcs_01M5N8SF1KF6ZPSDAFZWCPQEHQ","modified_at":"2023-11-08T04:13:20.455172Z","published_at":"2023-08-14T18:32:59Z","references":["https://osv.dev/vulnerability/GHSA-chgr-j2p9-jjh8","https://nvd.nist.gov/vuln/detail/CVE-2023-40312","https://github.com/OpenNMS/opennms/pull/6356","https://github.com/OpenNMS/opennms/commit/1365ba9129f1762707fdbf1edd1f3e460bfb31e0","https://docs.opennms.com/horizon/32/releasenotes/changelog.html","https://github.com/OpenNMS/opennms"],"severity":{"label":"medium","score":6.7},"sources":[{"source":"osv","source_id":"GHSA-chgr-j2p9-jjh8","url":"https://osv.dev/vulnerability/GHSA-chgr-j2p9-jjh8"}],"summary":"OpenNMS vulnerable to Cross-site Scripting"}