{"action":"Upgrade org.apache.sling:org.apache.sling.xss.compat to 1.1.0 or later.","affected":[{"fixed":"1.1.0","introduced":"0"}],"component":"org.apache.sling:org.apache.sling.xss.compat","cve_ids":["CVE-2016-5394"],"ecosystem":"Maven","epss":0.02604,"exploited":false,"fixed_versions":["1.1.0"],"ghsa_id":"GHSA-xwf4-88xr-hx2j","id":"tcs_01M5N9K3E97MJAWWXN10VQS9Z9","modified_at":"2024-02-16T08:25:12.105780Z","published_at":"2022-05-13T01:25:29Z","references":["https://osv.dev/vulnerability/GHSA-xwf4-88xr-hx2j","https://nvd.nist.gov/vuln/detail/CVE-2016-5394","https://github.com/apache/sling-org-apache-sling-xss/commit/de32b144ad2be3367559f6184d560db42a220529","https://github.com/jensdietrich/xshady-release/tree/main/CVE-2016-5394","https://lists.apache.org/thread.html/332166037a54b97cf41e2b616aaed38439de94b19b204841478e4525@%3Cdev.sling.apache.org%3E","http://www.securityfocus.com/bid/99870"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-xwf4-88xr-hx2j#Maven/org.apache.sling:org.apache.sling.xss.compat","url":"https://osv.dev/vulnerability/GHSA-xwf4-88xr-hx2j"}],"summary":"Cross site scripting in Apache Sling"}