{"action":"Upgrade org.apache.portals.pluto:chatRoomDemo to 3.1.0 or later.","affected":[{"fixed":"3.1.0","introduced":"3.0.0"}],"component":"org.apache.portals.pluto:chatRoomDemo","cve_ids":["CVE-2019-0186"],"ecosystem":"Maven","epss":0.20649,"exploited":false,"fixed_versions":["3.1.0"],"ghsa_id":"GHSA-w47g-4vrc-m3w2","id":"tcs_01M5N9FECG0E1B5NXY71ZNWPB9","modified_at":"2024-02-18T05:21:20.977509Z","published_at":"2022-05-24T16:44:43Z","references":["https://osv.dev/vulnerability/GHSA-w47g-4vrc-m3w2","https://nvd.nist.gov/vuln/detail/CVE-2019-0186","https://lists.apache.org/thread.html/d093e6b0e5f9b3b50928255451afefd8f8fbdcd5bf28a726769a919a@%3Cpluto-user.portals.apache.org%3E","https://portals.apache.org/pluto/security.html","https://www.exploit-db.com/exploits/46759","https://www.openwall.com/lists/oss-security/2019/04/25/8","http://mail-archives.apache.org/mod_mbox/portals-pluto-user/201904.mbox/%3CCAAqbB_ev=0KNgZmmNAq2=q11i1GYLGN6J-xCKx8Q8dbxZ4tZYg@mail.gmail.com%3E"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-w47g-4vrc-m3w2","url":"https://osv.dev/vulnerability/GHSA-w47g-4vrc-m3w2"}],"summary":"Cross-site Scripting in Apache Pluto Chatroom demo"}