{"action":"Upgrade org.springframework.integration:spring-integration-core to 4.3.23 (4.3.x), 5.1.12 (5.1.x), 5.2.8 (5.2.x) or 5.3.2 (5.3.x) or later.","affected":[{"fixed":"4.3.23","introduced":"4.3.0"},{"fixed":"5.3.2","introduced":"5.3.0"},{"fixed":"5.1.12","introduced":"5.1.0"},{"fixed":"5.2.8","introduced":"5.2.0"}],"component":"org.springframework.integration:spring-integration-core","cve_ids":["CVE-2020-5413"],"ecosystem":"Maven","epss":0.04409,"exploited":false,"fixed_versions":["4.3.23","5.3.2","5.1.12","5.2.8"],"ghsa_id":"GHSA-86qr-9vqc-pgc6","id":"tcs_01M5N8M2YPEVVA4JQEWPRWRZ7P","modified_at":"2023-11-08T04:03:55.588599Z","published_at":"2020-08-05T14:53:06Z","references":["https://osv.dev/vulnerability/GHSA-86qr-9vqc-pgc6","https://nvd.nist.gov/vuln/detail/CVE-2020-5413","https://github.com/spring-projects/spring-integration/commit/6a02b5abe97fabab6003d51b98dd45ab009a6e05","https://github.com/spring-projects/spring-integration","https://tanzu.vmware.com/security/cve-2020-5413","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-86qr-9vqc-pgc6","url":"https://osv.dev/vulnerability/GHSA-86qr-9vqc-pgc6"}],"summary":"Code execution in Spring Integration"}