{"action":"Upgrade org.apache.commons:commons-configuration2 to 2.7 or later.","affected":[{"fixed":"2.7","introduced":"2.2"}],"component":"org.apache.commons:commons-configuration2","cve_ids":["CVE-2020-1953"],"ecosystem":"Maven","epss":0.06323,"exploited":false,"fixed_versions":["2.7"],"ghsa_id":"GHSA-7qx4-pp76-vrqh","id":"tcs_01M5N8K209HVM6YYN6SWT5J8MG","modified_at":"2023-11-08T04:02:46.926629Z","published_at":"2020-05-21T19:08:08Z","references":["https://osv.dev/vulnerability/GHSA-7qx4-pp76-vrqh","https://nvd.nist.gov/vuln/detail/CVE-2020-1953","https://github.com/apache/commons-configuration/commit/add7375cf37fd316d4838c6c56b054fc293b4641","https://lists.apache.org/thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600@%3Cannounce.tomcat.apache.org%3E","https://lists.apache.org/thread.html/r16a2e949e35780c8974cf66104e812410f3904f752df6b66bf292269@%3Ccommits.servicecomb.apache.org%3E","https://lists.apache.org/thread.html/rde2186ad6ac0d6ed8d51af7509244adcf1ce0f9a3b7e1d1dd3b64676@%3Ccommits.camel.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2020.html"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-7qx4-pp76-vrqh","url":"https://osv.dev/vulnerability/GHSA-7qx4-pp76-vrqh"}],"summary":"Remote code execution in Apache Commons Configuration"}