{"action":"Upgrade io.vertx:vertx-web to 4.0.0-milestone5 or later.","affected":[{"fixed":"4.0.0-milestone5","introduced":"4.0.0-milestone1"},{"fixed":"4.0.0-milestone5","introduced":"4.0.0-milestone2"},{"fixed":"4.0.0-milestone5","introduced":"4.0.0-milestone3"},{"fixed":"4.0.0-milestone5","introduced":"4.0.0-milestone4"}],"component":"io.vertx:vertx-web","cve_ids":["CVE-2020-35217"],"ecosystem":"Maven","epss":0.00587,"exploited":false,"fixed_versions":["4.0.0-milestone5"],"ghsa_id":"GHSA-9q69-g5gc-9fgf","id":"tcs_01M5N8QGRDEAV8NEPAY08555PT","modified_at":"2023-11-08T04:03:33.135481Z","published_at":"2021-04-22T16:16:18Z","references":["https://osv.dev/vulnerability/GHSA-9q69-g5gc-9fgf","https://nvd.nist.gov/vuln/detail/CVE-2020-35217","https://github.com/vert-x3/vertx-web/pull/1613"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-9q69-g5gc-9fgf","url":"https://osv.dev/vulnerability/GHSA-9q69-g5gc-9fgf"}],"summary":"Cross-Site Request Forgery in Vert.x-Web framework"}