{"action":"Upgrade org.opennms:opennms-webapp to 32.0.2 or later.","affected":[{"fixed":"32.0.2","introduced":"31.0.8"}],"component":"org.opennms:opennms-webapp","cve_ids":["CVE-2023-40311"],"ecosystem":"Maven","epss":0.00741,"exploited":false,"fixed_versions":["32.0.2"],"ghsa_id":"GHSA-qfw7-pfxx-h9q2","id":"tcs_01M5N99EKFXVNV20FB8F9ZQ8EG","modified_at":"2023-11-08T04:13:20.394142Z","published_at":"2023-08-14T18:32:59Z","references":["https://osv.dev/vulnerability/GHSA-qfw7-pfxx-h9q2","https://nvd.nist.gov/vuln/detail/CVE-2023-40311","https://github.com/OpenNMS/opennms/pull/6365","https://github.com/OpenNMS/opennms/pull/6366","https://github.com/OpenNMS/opennms/commit/6ccc5de1a23d440560e0f09dfd94f8392c21e70d","https://github.com/OpenNMS/opennms/commit/c67d1cae2fa1fb806c9d422f6e6fbf4ebfde6b60","https://github.com/OpenNMS/opennms"],"severity":{"label":"medium","score":6.7},"sources":[{"source":"osv","source_id":"GHSA-qfw7-pfxx-h9q2","url":"https://osv.dev/vulnerability/GHSA-qfw7-pfxx-h9q2"}],"summary":"OpenNMS vulnerable to Cross-site Scripting"}