{"action":"Upgrade org.igniterealtime.openfire:xmppserver to 4.4.2 or later.","affected":[{"fixed":"4.4.2","introduced":"0"}],"component":"org.igniterealtime.openfire:xmppserver","cve_ids":["CVE-2019-20528"],"ecosystem":"Maven","epss":0.00906,"exploited":false,"fixed_versions":["4.4.2"],"ghsa_id":"GHSA-wx2w-8pqw-vp4g","id":"tcs_01M5N9HBV1C57GBEXMVDGYHWQ3","modified_at":"2024-02-19T05:37:53.950061Z","published_at":"2022-05-24T17:11:49Z","references":["https://osv.dev/vulnerability/GHSA-wx2w-8pqw-vp4g","https://nvd.nist.gov/vuln/detail/CVE-2019-20528","https://www.netsparker.com/web-applications-advisories/ns-19-015-reflected-cross-site-scripting-in-openfire"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-wx2w-8pqw-vp4g","url":"https://osv.dev/vulnerability/GHSA-wx2w-8pqw-vp4g"}],"summary":"Ignite Realtime Openfire allows Cross-site Scripting"}