{"action":"Upgrade org.apache.ranger:ranger to 0.6.1 or later.","affected":[{"fixed":"0.6.1","introduced":"0"}],"component":"org.apache.ranger:ranger","cve_ids":["CVE-2016-5395"],"ecosystem":"Maven","epss":0.02105,"exploited":false,"fixed_versions":["0.6.1"],"ghsa_id":"GHSA-rf7q-xqm3-6923","id":"tcs_01M5N9BNP6APR5EKD92PVK85G9","modified_at":"2023-11-08T03:58:31.327757Z","published_at":"2018-10-17T17:21:37Z","references":["https://osv.dev/vulnerability/GHSA-rf7q-xqm3-6923","https://nvd.nist.gov/vuln/detail/CVE-2016-5395","https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger","https://github.com/advisories/GHSA-rf7q-xqm3-6923","http://www.securityfocus.com/bid/92577"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-rf7q-xqm3-6923","url":"https://osv.dev/vulnerability/GHSA-rf7q-xqm3-6923"}],"summary":"Apache Ranger allows remote authenticated administrators to inject arbitrary web script or HTML"}