{"action":"Upgrade com.haulmont.cuba:cuba-web-toolkit to 6.8.15 (6.8.x), 6.9.8 (6.9.x) or 6.10.7 (6.10.x) or later.","affected":[{"fixed":"6.10.7","introduced":"6.10.0"},{"fixed":"6.9.8","introduced":"6.9.0"},{"fixed":"6.8.15","introduced":"0"}],"component":"com.haulmont.cuba:cuba-web-toolkit","cve_ids":["CVE-2018-20663"],"ecosystem":"Maven","epss":0.00667,"exploited":false,"fixed_versions":["6.10.7","6.9.8","6.8.15"],"ghsa_id":"GHSA-rff7-964g-pppx","id":"tcs_01M5N9BQ1CJ6F20WEE9FNK8KKZ","modified_at":"2025-04-22T17:27:12.875748Z","published_at":"2022-05-14T01:40:50Z","references":["https://osv.dev/vulnerability/GHSA-rff7-964g-pppx","https://nvd.nist.gov/vuln/detail/CVE-2018-20663","https://github.com/cuba-platform/cuba/issues/1741","https://github.com/cuba-platform/reports/issues/140","https://github.com/cuba-platform/cuba/commit/be6aa41ff36a365e2a995d37861e5acfcd32c2c5","https://github.com/cuba-platform/cuba/commit/e9f972beeae42dc6dbc3aaa6b6ecc9814c0eedb4","https://github.com/cuba-platform/cuba/commit/ec8784d8f596aa570604f4e5d5d4a7c3ae264c62","https://github.com/cuba-platform/reports"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-rff7-964g-pppx","url":"https://osv.dev/vulnerability/GHSA-rff7-964g-pppx"}],"summary":"The Reporting Addon for CUBA Platform has Persistent XSS"}