{"action":"Upgrade org.apache.uima:uima-ducc-web to 3.0.0 or later.","affected":[{"fixed":"3.0.0","introduced":"0"}],"component":"org.apache.uima:uima-ducc-web","cve_ids":["CVE-2018-8035"],"ecosystem":"Maven","epss":0.04885,"exploited":false,"fixed_versions":["3.0.0"],"ghsa_id":"GHSA-vm59-329q-p468","id":"tcs_01M5N9EA1N2DARJ6VSSC9TGBKV","modified_at":"2023-11-08T04:00:25.039780Z","published_at":"2019-05-14T04:00:37Z","references":["https://osv.dev/vulnerability/GHSA-vm59-329q-p468","https://nvd.nist.gov/vuln/detail/CVE-2018-8035","https://lists.apache.org/thread.html/2f49681259b375d53431605f1c557ef8a3ed0af01a488d2e1b330053@%3Cdev.uima.apache.org%3E","https://uima.apache.org/security_report","http://www.securityfocus.com/bid/108195"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-vm59-329q-p468","url":"https://osv.dev/vulnerability/GHSA-vm59-329q-p468"}],"summary":"Cross-site Scripting in Apache UIMA"}