{"action":"Upgrade org.apache.portals.jetspeed-2:jetspeed to 2.3.1 or later.","affected":[{"fixed":"2.3.1","introduced":"0"}],"component":"org.apache.portals.jetspeed-2:jetspeed","cve_ids":["CVE-2016-0712"],"ecosystem":"Maven","epss":0.03203,"exploited":false,"fixed_versions":["2.3.1"],"ghsa_id":"GHSA-hj2v-85ph-8g48","id":"tcs_01M5N90T5ANAG0J6QT2K1C04XJ","modified_at":"2023-11-08T03:58:05.428588Z","published_at":"2022-05-17T03:56:48Z","references":["https://osv.dev/vulnerability/GHSA-hj2v-85ph-8g48","https://nvd.nist.gov/vuln/detail/CVE-2016-0712","https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3CF868DBFC-A05C-4ABB-8B91-17CA54C174B9@bluesunrise.com%3E","https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0712"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-hj2v-85ph-8g48","url":"https://osv.dev/vulnerability/GHSA-hj2v-85ph-8g48"}],"summary":"Cross-site Scripting in Apache Jetspeed"}