{"action":"Upgrade org.wso2.carbon.registry:carbon-registry to 4.8.12 or later.","affected":[{"fixed":"4.8.12","introduced":"0"}],"component":"org.wso2.carbon.registry:carbon-registry","cve_ids":["CVE-2022-4520"],"ecosystem":"Maven","epss":0.00697,"exploited":false,"fixed_versions":["4.8.12"],"ghsa_id":"GHSA-j34r-57xj-pfm5","id":"tcs_01M5N91V5ZKQJ308V16VWZJ704","modified_at":"2023-11-08T04:10:50.759935Z","published_at":"2022-12-15T21:30:26Z","references":["https://osv.dev/vulnerability/GHSA-j34r-57xj-pfm5","https://nvd.nist.gov/vuln/detail/CVE-2022-4520","https://github.com/wso2/carbon-registry/pull/404","https://github.com/wso2/carbon-registry/commit/0c827cc1b14b82d8eb86117ab2e43c34bb91ddb4","https://github.com/wso2/carbon-registry","https://github.com/wso2/carbon-registry/releases/tag/v4.8.12","https://vuldb.com/?id.215900"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-j34r-57xj-pfm5","url":"https://osv.dev/vulnerability/GHSA-j34r-57xj-pfm5"}],"summary":"WSO2 carbon-registry Cross-site Scripting vulnerability"}