{"action":"Upgrade org.opennms.core:org.opennms.core.daemon to 26.0.1 or later.","affected":[{"fixed":"26.0.1","introduced":"0"}],"component":"org.opennms.core:org.opennms.core.daemon","cve_ids":["CVE-2020-12760"],"ecosystem":"Maven","epss":0.03456,"exploited":false,"fixed_versions":["26.0.1"],"ghsa_id":"GHSA-853f-x27w-8r74","id":"tcs_01M5N8KTE6JHYDH22EGNRSTQZF","modified_at":"2023-11-08T04:02:11.834573Z","published_at":"2022-05-24T17:17:36Z","references":["https://osv.dev/vulnerability/GHSA-853f-x27w-8r74","https://nvd.nist.gov/vuln/detail/CVE-2020-12760","https://github.com/OpenNMS/opennms/pull/2983","https://github.com/OpenNMS/opennms/commit/e21fc14ce355533493da0db815bd81a66e291382","https://github.com/OpenNMS/opennms","https://github.com/OpenNMS/opennms/releases/tag/opennms-26.0.1-1","https://issues.opennms.org/browse/NMS-12673","https://www.opennms.com/en/blog/2020-04-29-opennms-horizon-26-0-1-luchador-released","https://www.opennms.com/en/blog/2020-04-29-opennms-meridian-2018-1-18-wildfire-released","https://www.opennms.com/en/blog/2020-04-29-opennms-meridian-2019-1-6-europa-released"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-853f-x27w-8r74","url":"https://osv.dev/vulnerability/GHSA-853f-x27w-8r74"}],"summary":"OpenNMS Horizon RCE via Unsafe Deserialization"}