{"action":"Upgrade org.codelibs.fess:fess to 12.3.2 or later.","affected":[{"fixed":"12.3.2","introduced":"0"}],"component":"org.codelibs.fess:fess","cve_ids":["CVE-2018-1000822"],"ecosystem":"Maven","epss":0.01937,"exploited":false,"fixed_versions":["12.3.2"],"ghsa_id":"GHSA-77hp-pfxw-4w63","id":"tcs_01M5N8HS3HR7ABMWE59AT54Q08","modified_at":"2024-02-16T08:13:08.613833Z","published_at":"2018-12-20T22:02:09Z","references":["https://osv.dev/vulnerability/GHSA-77hp-pfxw-4w63","https://nvd.nist.gov/vuln/detail/CVE-2018-1000822","https://github.com/codelibs/fess/issues/1851","https://0dd.zone/2018/10/27/fess-XXE","https://github.com/advisories/GHSA-77hp-pfxw-4w63","https://github.com/codelibs/fess"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-77hp-pfxw-4w63","url":"https://osv.dev/vulnerability/GHSA-77hp-pfxw-4w63"}],"summary":"XML External Entity (XXE) vulnerability in codelibs fess"}