{"action":"Upgrade org.opennms:opennms-provision to 27.0.4 or later.","affected":[{"fixed":"27.0.4","introduced":"16.0.0"}],"component":"org.opennms:opennms-provision","cve_ids":["CVE-2021-3396"],"ecosystem":"Maven","epss":0.02365,"exploited":false,"fixed_versions":["27.0.4"],"ghsa_id":"GHSA-c3mp-9vx3-2rvv","id":"tcs_01M5N8RBPFN4NQWK48448XWBGY","modified_at":"2023-11-08T04:06:06.781320Z","published_at":"2022-05-24T17:42:35Z","references":["https://osv.dev/vulnerability/GHSA-c3mp-9vx3-2rvv","https://nvd.nist.gov/vuln/detail/CVE-2021-3396","https://github.com/OpenNMS/opennms/pull/3281","https://issues.opennms.org/browse/NMS-13103","https://www.opennms.com/en/blog/2021-02-16-cve-2021-3396-full-security-disclosure"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-c3mp-9vx3-2rvv#Maven/org.opennms:opennms-provision","url":"https://osv.dev/vulnerability/GHSA-c3mp-9vx3-2rvv"}],"summary":"OpenNMS Horizon RCE via JEXL2 expression"}