{"action":"Upgrade org.apache.ranger:ranger to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0.7.0"}],"component":"org.apache.ranger:ranger","cve_ids":["CVE-2019-12397"],"ecosystem":"Maven","epss":0.02965,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-fpqp-v323-44xv","id":"tcs_01M5N8WGQ5T1J6CP1NZ3E6MXJ4","modified_at":"2023-11-08T04:01:03.869656Z","published_at":"2019-08-16T14:01:35Z","references":["https://osv.dev/vulnerability/GHSA-fpqp-v323-44xv","https://nvd.nist.gov/vuln/detail/CVE-2019-12397","https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger","https://lists.apache.org/thread.html/ab2de1adad96f5dbd19d976b28715dfc60dbe75e82a74f48be8ef695@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/cbc6346708ef2b9ffb2555637311bf6294923c609c029389fa39de8f@%3Cdev.ranger.apache.org%3E","http://www.openwall.com/lists/oss-security/2019/08/08/1"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-fpqp-v323-44xv","url":"https://osv.dev/vulnerability/GHSA-fpqp-v323-44xv"}],"summary":"Cross-site scripting in Apache Ranger"}