{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"2.1.0","last_affected":"2.1.14"}],"component":"org.apache.syncope.client:syncope-client-console","cve_ids":["CVE-2024-45031"],"ecosystem":"Maven","epss":0.00708,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jmrf-85g8-x8xv","id":"tcs_01M5N938GS695J01RXHPQ8GVYJ","modified_at":"2024-11-26T19:08:13.734698Z","published_at":"2024-10-24T15:31:08Z","references":["https://osv.dev/vulnerability/GHSA-jmrf-85g8-x8xv","https://nvd.nist.gov/vuln/detail/CVE-2024-45031","https://github.com/apache/syncope/commit/0c620a9eda2c0927875c129ebae66d2ea94f3e6a","https://github.com/apache/syncope/commit/f80d3f6cfbd71acb03ece0f7601f660ee0be7e74","https://github.com/apache/syncope","https://lists.apache.org/thread/fn567pfmo3s55ofkc42drz8b4kgbhp9m","https://syncope.apache.org/security#cve-2024-45031-apache-syncope-stored-xss-in-console-and-enduser","http://www.openwall.com/lists/oss-security/2024/10/24/2"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-jmrf-85g8-x8xv","url":"https://osv.dev/vulnerability/GHSA-jmrf-85g8-x8xv"}],"summary":"Apache Syncope: Stored XSS in Console and Enduser"}