{"action":"Upgrade org.apache.velocity.tools:velocity-tools-parent to 3.1 or later.","affected":[{"fixed":"3.1","introduced":"0"}],"component":"org.apache.velocity.tools:velocity-tools-parent","cve_ids":["CVE-2020-13959"],"ecosystem":"Maven","epss":0.05723,"exploited":false,"fixed_versions":["3.1"],"ghsa_id":"GHSA-fh63-4r66-jc7v","id":"tcs_01M5N8W1EE03ABH68PDFCH79V3","modified_at":"2023-11-08T04:02:24.445339Z","published_at":"2021-03-12T20:24:22Z","references":["https://osv.dev/vulnerability/GHSA-fh63-4r66-jc7v","https://nvd.nist.gov/vuln/detail/CVE-2020-13959","https://lists.apache.org/thread.html/r6802a38c3041059e763a1aadd7b37fe95de75408144b5805e29b84e3%40%3Cuser.velocity.apache.org%3E","https://lists.apache.org/thread.html/r6802a38c3041059e763a1aadd7b37fe95de75408144b5805e29b84e3@%3Cuser.velocity.apache.org%3E","https://lists.apache.org/thread.html/r97edad0655770342d2d36620fb1de50b142fcd6c4f5c53dd72ca41d7@%3Cuser.velocity.apache.org%3E","https://lists.apache.org/thread.html/rb042f3b0090e419cc9f5a3d32cf0baff283ccd6fcb1caea61915d6b6@%3Ccommits.velocity.apache.org%3E","https://lists.apache.org/thread.html/rf9868c564cff7adfd5283563f2309b93b3e496354a211a57503b2f72@%3Cannounce.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/03/msg00021.html","https://security.gentoo.org/glsa/202107-52","http://www.openwall.com/lists/oss-security/2021/03/10/2"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-fh63-4r66-jc7v","url":"https://osv.dev/vulnerability/GHSA-fh63-4r66-jc7v"}],"summary":"Cross-site scripting (XSS) in Apache Velocity Tools"}