{"action":"Upgrade org.xwiki.commons:xwiki-commons-velocity to 12.6.7 (12.6.x) or 12.10.3 (12.10.x) or later.","affected":[{"fixed":"12.6.7","introduced":"2.3.0"},{"fixed":"12.10.3","introduced":"12.7.0"}],"component":"org.xwiki.commons:xwiki-commons-velocity","cve_ids":["CVE-2022-24897"],"ecosystem":"Maven","epss":0.0179,"exploited":false,"fixed_versions":["12.6.7","12.10.3"],"ghsa_id":"GHSA-cvx5-m8vg-vxgc","id":"tcs_01M5N8TDJQQAZ7GBJ4T92737WD","modified_at":"2023-11-08T04:08:39.721181Z","published_at":"2022-04-28T21:16:40Z","references":["https://osv.dev/vulnerability/GHSA-cvx5-m8vg-vxgc","https://github.com/xwiki/xwiki-commons/security/advisories/GHSA-cvx5-m8vg-vxgc","https://nvd.nist.gov/vuln/detail/CVE-2022-24897","https://github.com/xwiki/xwiki-commons/pull/127","https://github.com/xwiki/xwiki-commons/commit/215951cfb0f808d0bf5b1097c9e7d1e503449ab8","https://github.com/xwiki/xwiki-commons","https://jira.xwiki.org/browse/XWIKI-5168"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cvx5-m8vg-vxgc","url":"https://osv.dev/vulnerability/GHSA-cvx5-m8vg-vxgc"}],"summary":"Arbitrary filesystem write access from velocity."}