{"affected":[{"defaultStatus":"unaffected","ecosystem":"maven","packageName":"de.ipb-halle:molecularfaces","product":"","source":"CNA: VulnCheck","vendor":"","versions":[{"lessThan":"0.3.0","status":"affected","version":"0","versionType":"maven"}]},{"defaultStatus":"unaffected","ecosystem":"Maven","packageName":"de.ipb-halle:molecularfaces","product":"de.ipb-halle:molecularfaces","source":"OSV GHSA-2pwh-52h7-7j84","vendor":"","versions":[{"status":"affected","version":"0.2.0","versionType":"Maven"},{"events":[{"introduced":"0"},{"fixed":"0.3.0"}],"status":"unknown","version":"0","versionType":"ECOSYSTEM"}]}],"cveId":"CVE-2024-0758","cwes":["CWE-79"],"description":"MolecularFaces before 0.3.0 is vulnerable to cross site scripting. A remote attacker can execute arbitrary JavaScript in the context of a victim browser via crafted molfiles.","epss":{"date":"2026-11-08","percentile":0.4727,"score":0.00566},"exploits":[],"kev":null,"metrics":[{"score":6.1,"severity":"medium","source":"ADP: CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"}],"modifiedAt":1794146389475,"publishedAt":1705695580558,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/ipb-halle/MolecularFaces/security/advisories/GHSA-2pwh-52h7-7j84"},{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/advisories/GHSA-2pwh-52h7-7j84"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-2pwh-52h7-7j84"},{"source":"ADP: CVE","tags":["vendor-advisory","x_transferred"],"url":"https://github.com/ipb-halle/MolecularFaces/security/advisories/GHSA-2pwh-52h7-7j84"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://github.com/advisories/GHSA-2pwh-52h7-7j84"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-2pwh-52h7-7j84"},{"source":"OSV / GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/advisories/GHSA-2pwh-52h7-7j84"},{"source":"OSV / GitHub Security Advisories","tags":["osv"],"url":"https://osv.dev/vulnerability/GHSA-2pwh-52h7-7j84"}],"remediation":[{"kind":"fix","source":"OSV GHSA-2pwh-52h7-7j84","text":"de.ipb-halle:molecularfaces (Maven): OSV reports a fixed version 0.3.0. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-2pwh-52h7-7j84"}],"revision":"a373cd4c1267a5f5d11f190b4e79a9ebded4d7e976d56df3723b51820700d0f7","sources":[{"modifiedAt":1794146389475,"name":"CNA: VulnCheck","retrievedAt":1794146914591,"url":"https://www.cve.org/CVERecord?id=CVE-2024-0758"},{"modifiedAt":1783493576132,"name":"OSV / GitHub Security Advisories","retrievedAt":1794146915016,"url":"https://osv.dev/vulnerability/GHSA-2pwh-52h7-7j84"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794150528424,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-0758"}],"ssvc":{"assessedAt":1746725746268,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"MolecularFaces XSS","updatedAt":1794150528424}