{"action":"Upgrade org.apache.portals.jetspeed-2:jetspeed to 2.3.1 or later.","affected":[{"fixed":"2.3.1","introduced":"0"}],"component":"org.apache.portals.jetspeed-2:jetspeed","cve_ids":["CVE-2016-0710"],"ecosystem":"Maven","epss":0.52351,"exploited":false,"fixed_versions":["2.3.1"],"ghsa_id":"GHSA-88f6-79x2-xqf3","id":"tcs_01M5N8M95CFKND755MCCQN2XFK","modified_at":"2025-04-14T21:12:17.288777Z","published_at":"2022-05-17T03:56:49Z","references":["https://osv.dev/vulnerability/GHSA-88f6-79x2-xqf3","https://nvd.nist.gov/vuln/detail/CVE-2016-0710","https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3C046318A1-226E-453F-9394-B84F1A33E6A4%40bluesunrise.com%3E","https://mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3C046318A1-226E-453F-9394-B84F1A33E6A4@bluesunrise.com%3E","https://portals.apache.org/jetspeed-2/security-reports.html#CVE-2016-0710","https://www.exploit-db.com/exploits/39643","http://haxx.ml/post/140552592371/remote-code-execution-in-apache-jetspeed-230-and","http://packetstormsecurity.com/files/136489/Apache-Jetspeed-Arbitrary-File-Upload.html","http://www.rapid7.com/db/modules/exploit/multi/http/apache_jetspeed_file_upload"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-88f6-79x2-xqf3","url":"https://osv.dev/vulnerability/GHSA-88f6-79x2-xqf3"}],"summary":"Apache Jetspeed vulnerable to SQL Injection"}