{"action":"Upgrade org.keycloak:keycloak-core to 17.0.0 or later.","affected":[{"fixed":"17.0.0","introduced":"15.0.0"}],"component":"org.keycloak:keycloak-core","cve_ids":["CVE-2021-20323"],"ecosystem":"Maven","epss":0.37246,"exploited":false,"fixed_versions":["17.0.0"],"ghsa_id":"GHSA-xpgc-j48j-jwv9","id":"tcs_01M5N9JPVNJNR6YKQE44WY9JMM","modified_at":"2023-11-08T04:04:37.052063Z","published_at":"2022-03-26T00:00:31Z","references":["https://osv.dev/vulnerability/GHSA-xpgc-j48j-jwv9","https://nvd.nist.gov/vuln/detail/CVE-2021-20323","https://bugzilla.redhat.com/show_bug.cgi?id=2013577","https://github.com/keycloak/keycloak"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-xpgc-j48j-jwv9","url":"https://osv.dev/vulnerability/GHSA-xpgc-j48j-jwv9"}],"summary":"Cross-site Scripting in Keycloak"}