{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"6.3.5"}],"component":"org.silverpeas.core:silverpeas-core-rs","cve_ids":["CVE-2024-39031"],"ecosystem":"Maven","epss":0.00767,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vfwh-gvf6-mff8","id":"tcs_01M5N9E06BP57DQXQFMCGXH3AD","modified_at":"2025-01-15T15:10:29Z","published_at":"2024-07-09T21:30:39Z","references":["https://osv.dev/vulnerability/GHSA-vfwh-gvf6-mff8","https://nvd.nist.gov/vuln/detail/CVE-2024-39031","https://github.com/Silverpeas/Silverpeas-Core/commit/a0289f8a6f8b6a9ebc399973093118ddb48b77d8","https://github.com/Silverpeas/Silverpeas-Core","https://github.com/toneemarqus/CVE-2024-39031","https://www.github.com/Silverpeas/Silverpeas-Core/pull/1346"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-vfwh-gvf6-mff8","url":"https://osv.dev/vulnerability/GHSA-vfwh-gvf6-mff8"}],"summary":"Silverpeas Core Cross-site Scripting vulnerability"}