{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"14.6.01"}],"component":"com.mintegral.msdk:alphab","cve_ids":["CVE-2020-7744"],"ecosystem":"Maven","epss":0.00857,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-c6p9-24rc-jr5h","id":"tcs_01M5N8RS2KJ0FP524JJ3V3WV47","modified_at":"2026-03-14T10:41:06.063315Z","published_at":"2021-04-22T16:15:15Z","references":["https://osv.dev/vulnerability/GHSA-c6p9-24rc-jr5h","https://nvd.nist.gov/vuln/detail/CVE-2020-7744","https://snyk.io/blog/remote-code-execution-rce-sourmint","https://snyk.io/research/sour-mint-malicious-sdk","https://snyk.io/vuln/SNYK-JAVA-COMMINTEGRALMSDK-1018714"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-c6p9-24rc-jr5h","url":"https://osv.dev/vulnerability/GHSA-c6p9-24rc-jr5h"}],"summary":"Remote Code Execution and download tracking in Mintegral SDK"}