{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"2.0.0","last_affected":"2.1.2"}],"component":"org.fourthline.cling:cling-core","cve_ids":["CVE-2020-23622"],"ecosystem":"Maven","epss":0.01156,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-c438-6f6r-pg8w","id":"tcs_01M5N8RD76FQAZYJ0Y1MXDDS3P","modified_at":"2023-11-08T04:03:06.096989Z","published_at":"2022-08-16T00:00:22Z","references":["https://osv.dev/vulnerability/GHSA-c438-6f6r-pg8w","https://nvd.nist.gov/vuln/detail/CVE-2020-23622","https://github.com/4thline/cling/issues/253","https://github.com/4thline/cling","https://zh-cn.tenable.com/blog/cve-2020-12695-callstranger-vulnerability-in-universal-plug-and-play-upnp-puts-billions-of?tns_redirect=true"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-c438-6f6r-pg8w","url":"https://osv.dev/vulnerability/GHSA-c438-6f6r-pg8w"}],"summary":"4thline cling uPnP protocol issue can lead to denial of service"}