{"action":"Upgrade com.amazonaws:aws-android-sdk-mobile-client to 2.59.1 or later.","affected":[{"fixed":"2.59.1","introduced":"0"}],"component":"com.amazonaws:aws-android-sdk-mobile-client","cve_ids":["CVE-2022-4725"],"ecosystem":"Maven","epss":0.00727,"exploited":false,"fixed_versions":["2.59.1"],"ghsa_id":"GHSA-f5h9-qx38-2hgp","id":"tcs_01M5N8V2Z24FJG3796N2H3JAEY","modified_at":"2023-11-08T04:10:59.678808Z","published_at":"2022-12-27T15:30:19Z","references":["https://osv.dev/vulnerability/GHSA-f5h9-qx38-2hgp","https://nvd.nist.gov/vuln/detail/CVE-2022-4725","https://github.com/aws-amplify/aws-sdk-android/pull/3100","https://github.com/aws-amplify/aws-sdk-android/commit/c3e6d69422e1f0c80fe53f2d757b8df97619af2b","https://github.com/aws-amplify/aws-sdk-android","https://github.com/aws-amplify/aws-sdk-android/releases/tag/release_v2.59.1","https://vuldb.com/?id.216737"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-f5h9-qx38-2hgp","url":"https://osv.dev/vulnerability/GHSA-f5h9-qx38-2hgp"}],"summary":"AWS SDK is vulnerable to server-side request forgery (SSRF)"}