{"id":"GHSA-3w96-p6vh-c298","aliases":["CVE-2023-0827"],"title":"Cross-site Scripting in pimcore","description":"Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17.","severity":"medium","score":6.3,"published":"2023-02-14T15:30:27.000Z","modified":"2023-11-08T04:11:12.201Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"pimcore/pimcore","ranges":[{"events":[{"introduced":"0"},{"fixed":"1.5.17"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["1.5.17"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2023-0827","https://github.com/pimcore/pimcore/commit/f4050586136cb4c44e3d6042111a1b87b340df95","https://github.com/pimcore/pimcore","https://huntr.dev/bounties/75bc7d07-46a7-4ed9-a405-af4fc47fb422"],"sources":[{"name":"OSV","id":"GHSA-3w96-p6vh-c298","modified":"2023-11-08T04:11:12.201705Z","url":"https://osv.dev/vulnerability/GHSA-3w96-p6vh-c298"}],"assessments":[{"source":"OSV","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","score":6.3}]}