{"action":"Upgrade org.igniterealtime.openfire:parent to 4.4.2 or later.","affected":[{"fixed":"4.4.2","introduced":"0"}],"component":"org.igniterealtime.openfire:parent","cve_ids":["CVE-2019-20525"],"ecosystem":"Maven","epss":0.00906,"exploited":false,"fixed_versions":["4.4.2"],"ghsa_id":"GHSA-h2mq-p9r5-wh94","id":"tcs_01M5N8ZDFMJ1YT1TZ3N0HRDGMR","modified_at":"2024-02-19T05:26:05.471045Z","published_at":"2022-05-24T17:11:57Z","references":["https://osv.dev/vulnerability/GHSA-h2mq-p9r5-wh94","https://nvd.nist.gov/vuln/detail/CVE-2019-20525","https://www.netsparker.com/web-applications-advisories/ns-19-015-reflected-cross-site-scripting-in-openfire"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-h2mq-p9r5-wh94","url":"https://osv.dev/vulnerability/GHSA-h2mq-p9r5-wh94"}],"summary":"Ignite Realtime Openfire allows Cross-site Scripting"}