{"action":"Upgrade org.igniterealtime.openfire:parent to 4.5.0 or later.","affected":[{"fixed":"4.5.0","introduced":"0"}],"component":"org.igniterealtime.openfire:parent","cve_ids":["CVE-2019-20366"],"ecosystem":"Maven","epss":0.01265,"exploited":false,"fixed_versions":["4.5.0"],"ghsa_id":"GHSA-m6pr-xcrm-4qqp","id":"tcs_01M5N94JKH3MKW5RPPTPQ1CM1X","modified_at":"2024-11-29T05:27:05.912722Z","published_at":"2022-05-24T22:01:17Z","references":["https://osv.dev/vulnerability/GHSA-m6pr-xcrm-4qqp","https://nvd.nist.gov/vuln/detail/CVE-2019-20366","https://github.com/igniterealtime/Openfire/pull/1561","https://github.com/igniterealtime/Openfire/commit/fef55d4be50da8f66f468d9e7d822528acb8273d","https://cybersecurityworks.com/zerodays/cve-2019-20366-openfire.html","https://github.com/igniterealtime/Openfire","https://issues.igniterealtime.org/browse/OF-1955"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-m6pr-xcrm-4qqp","url":"https://osv.dev/vulnerability/GHSA-m6pr-xcrm-4qqp"},{"source":"nvd","source_id":"CVE-2019-20366","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20366"}],"summary":"XSS in Ignite Realtime Openfire via isTrustStore"}