{"action":"Upgrade org.wso2.carbon.registry:carbon-registry to 4.7.37 or later.","affected":[{"fixed":"4.7.37","introduced":"0"}],"component":"org.wso2.carbon.registry:carbon-registry","cve_ids":["CVE-2023-6911"],"ecosystem":"Maven","epss":0.00406,"exploited":false,"fixed_versions":["4.7.37"],"ghsa_id":"GHSA-rfq3-wpjh-ppvg","id":"tcs_01M5N9BR8A83QK8ZVDBT37DYS7","modified_at":"2024-02-16T08:11:33.398904Z","published_at":"2023-12-22T18:30:30Z","references":["https://osv.dev/vulnerability/GHSA-rfq3-wpjh-ppvg","https://nvd.nist.gov/vuln/detail/CVE-2023-6911","https://github.com/wso2/carbon-registry/commit/878fc7e53c90acc85e303d2af73440014a68b246","https://github.com/wso2/carbon-registry","https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2021/WSO2-2020-1225"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-rfq3-wpjh-ppvg","url":"https://osv.dev/vulnerability/GHSA-rfq3-wpjh-ppvg"}],"summary":"WSO2 Registry Stored Cross Site Scripting (XSS) vulnerability"}