{"action":"Upgrade org.opencms:opencms-core to 7.0.4 or later.","affected":[{"fixed":"7.0.4","introduced":"0"}],"component":"org.opencms:opencms-core","cve_ids":["CVE-2008-1045"],"ecosystem":"Maven","epss":0.01465,"exploited":false,"fixed_versions":["7.0.4"],"ghsa_id":"GHSA-v965-wwrq-gxfg","id":"tcs_01M5N9DQQ4WNBN855A1D3FHTT5","modified_at":"2025-06-20T16:29:48.913893Z","published_at":"2022-05-01T23:36:05Z","references":["https://osv.dev/vulnerability/GHSA-v965-wwrq-gxfg","https://nvd.nist.gov/vuln/detail/CVE-2008-1045","https://github.com/alkacon/opencms-core/commit/49c5beded65bf0232cab61b1299b85dee9ae2014","https://github.com/alkacon/opencms-core","http://securityreason.com/securityalert/3702"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-v965-wwrq-gxfg","url":"https://osv.dev/vulnerability/GHSA-v965-wwrq-gxfg"}],"summary":"Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp"}