{"action":"Upgrade org.keycloak:keycloak-core to 1.1.0.Beta1 or later.","affected":[{"fixed":"1.1.0.Beta1","introduced":"0"}],"component":"org.keycloak:keycloak-core","cve_ids":["CVE-2014-3656"],"ecosystem":"Maven","epss":0.00768,"exploited":false,"fixed_versions":["1.1.0.Beta1"],"ghsa_id":"GHSA-px42-mr8m-cpgh","id":"tcs_01M5N988HWGBXW8G4B7QRXKAB6","modified_at":"2024-02-16T08:15:37.741595Z","published_at":"2022-05-17T19:57:06Z","references":["https://osv.dev/vulnerability/GHSA-px42-mr8m-cpgh","https://nvd.nist.gov/vuln/detail/CVE-2014-3656","https://github.com/keycloak/keycloak/commit/63b41e2548cbc20bd3758e34a82d880e177bf24c","https://access.redhat.com/security/cve/cve-2014-3656","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3656","https://issues.jboss.org/browse/KEYCLOAK-703","https://security.snyk.io/vuln/SNYK-JAVA-ORGKEYCLOAK-31231"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-px42-mr8m-cpgh","url":"https://osv.dev/vulnerability/GHSA-px42-mr8m-cpgh"}],"summary":"JBoss KeyCloak Cross-site Scripting Vulnerability"}