{"action":"Upgrade org.eclipse.hawkbit:hawkbit-parent to 0.3.0M7 or later.","affected":[{"fixed":"0.3.0M7","introduced":"0"}],"component":"org.eclipse.hawkbit:hawkbit-parent","cve_ids":["CVE-2020-27219"],"ecosystem":"Maven","epss":0.00835,"exploited":false,"fixed_versions":["0.3.0M7"],"ghsa_id":"GHSA-rcvx-rmvf-mxch","id":"tcs_01M5N9BMAXNX9HFPSP6MQ8DDJQ","modified_at":"2023-11-08T04:03:21.315466Z","published_at":"2022-02-09T22:19:44Z","references":["https://osv.dev/vulnerability/GHSA-rcvx-rmvf-mxch","https://nvd.nist.gov/vuln/detail/CVE-2020-27219","https://github.com/eclipse/hawkbit/issues/1067","https://github.com/eclipse/hawkbit/commit/94b7c12cde1b38eda5414bd88d6d068008cfb9f9","https://bugs.eclipse.org/bugs/show_bug.cgi?id=570289"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-rcvx-rmvf-mxch","url":"https://osv.dev/vulnerability/GHSA-rcvx-rmvf-mxch"}],"summary":"Cross-site Scripting in Eclipse Hawkbit"}