{"action":"Upgrade org.igniterealtime.openfire:parent to 3.9.2 or later.","affected":[{"fixed":"3.9.2","introduced":"0"}],"component":"org.igniterealtime.openfire:parent","cve_ids":["CVE-2018-11688"],"ecosystem":"Maven","epss":0.02372,"exploited":false,"fixed_versions":["3.9.2"],"ghsa_id":"GHSA-jphj-5g3m-w7x6","id":"tcs_01M5N93C92ZMZXX5TCZ1Y6AW0J","modified_at":"2023-11-08T03:59:46.638175Z","published_at":"2022-05-14T00:57:52Z","references":["https://osv.dev/vulnerability/GHSA-jphj-5g3m-w7x6","https://nvd.nist.gov/vuln/detail/CVE-2018-11688","https://github.com/igniterealtime/Openfire/commit/ed3492a24274fd454afe93a499db49f3d6335108#diff-3f607cf668ad8f1091e789a2c1dca32a","https://github.com/igniterealtime/Openfire","https://github.com/igniterealtime/Openfire/compare/v3.9.1...v3.9.2","https://vulmon.com/vulnerabilitydetails?qid=CVE-2018-11688","http://packetstormsecurity.com/files/148057/Ignite-Realtime-Openfire-3.7.1-Cross-Site-Scripting.html","http://seclists.org/fulldisclosure/2018/Jun/13","http://seclists.org/fulldisclosure/2018/Jun/24","http://www.securityfocus.com/archive/1/542060/100/0/threaded"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-jphj-5g3m-w7x6","url":"https://osv.dev/vulnerability/GHSA-jphj-5g3m-w7x6"}],"summary":"Ignite Realtime Openfire vulnerable to cross-site scripting"}