{"action":"Upgrade org.apereo.cas:cas-server-core-web to 6.4.2 or later.","affected":[{"fixed":"6.4.2","introduced":"0"}],"component":"org.apereo.cas:cas-server-core-web","cve_ids":["CVE-2021-42567"],"ecosystem":"Maven","epss":0.08191,"exploited":false,"fixed_versions":["6.4.2"],"ghsa_id":"GHSA-gfhx-jjwq-63gv","id":"tcs_01M5N8Y4W2T2VQ7XGGBSWWY0Q6","modified_at":"2024-11-30T05:31:26.901182Z","published_at":"2021-12-10T20:24:11Z","references":["https://osv.dev/vulnerability/GHSA-gfhx-jjwq-63gv","https://nvd.nist.gov/vuln/detail/CVE-2021-42567","https://github.com/apereo/cas/commit/376bf087d6d4267f61fc9f8028aa0d1ef407c3f0","https://apereo.github.io/2021/10/18/restvuln","https://github.com/apereo/cas","https://github.com/apereo/cas/releases"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-gfhx-jjwq-63gv","url":"https://osv.dev/vulnerability/GHSA-gfhx-jjwq-63gv"}],"summary":"Cross-site Scripting in Apereo CAS"}