{"action":"Upgrade org.geotools:gt-jdbc to 24.7 (24.x), 25.7 (25.x), 26.7 (26.x), 27.4 (27.x) or 28.2 (28.x) or later.","affected":[{"fixed":"28.2","introduced":"28.0"},{"fixed":"27.4","introduced":"27.0"},{"fixed":"26.7","introduced":"26.0"},{"fixed":"25.7","introduced":"25.0"},{"fixed":"24.7","introduced":"0"}],"component":"org.geotools:gt-jdbc","cve_ids":["CVE-2023-25158"],"ecosystem":"Maven","epss":0.01095,"exploited":false,"fixed_versions":["28.2","27.4","26.7","25.7","24.7"],"ghsa_id":"GHSA-99c3-qc2q-p94m","id":"tcs_01M5N8PP1JA15B0BKW5GHHY2HA","modified_at":"2023-11-08T04:11:50.640650Z","published_at":"2023-02-22T19:16:06Z","references":["https://osv.dev/vulnerability/GHSA-99c3-qc2q-p94m","https://github.com/geotools/geotools/security/advisories/GHSA-99c3-qc2q-p94m","https://nvd.nist.gov/vuln/detail/CVE-2023-25158","https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","https://github.com/geotools/geotools"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-99c3-qc2q-p94m","url":"https://osv.dev/vulnerability/GHSA-99c3-qc2q-p94m"}],"summary":"GeoTools OGC Filter SQL Injection Vulnerabilities"}