{"action":"Upgrade net.sourceforge.plantuml:plantuml-mit to 1.2023.9 or later.","affected":[{"fixed":"1.2023.9","introduced":"0"}],"component":"net.sourceforge.plantuml:plantuml-mit","cve_ids":["CVE-2023-3432"],"ecosystem":"Maven","epss":0.0087,"exploited":false,"fixed_versions":["1.2023.9"],"ghsa_id":"GHSA-ff3m-68vj-h86p","id":"tcs_01M5N8VV2Z66DBZMSBSCWHXRG6","modified_at":"2024-02-20T05:27:29.979229Z","published_at":"2023-06-27T15:30:29Z","references":["https://osv.dev/vulnerability/GHSA-ff3m-68vj-h86p","https://nvd.nist.gov/vuln/detail/CVE-2023-3432","https://github.com/plantuml/plantuml/commit/b32500bb61ae617bb312496d6d832e4be8190797","https://github.com/plantuml/plantuml","https://huntr.dev/bounties/8ac3316f-431c-468d-87e4-3dafff2ecf51","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FV7XL3CY3K3K5ER3ASMEQA546MIQQ7QM"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-ff3m-68vj-h86p","url":"https://osv.dev/vulnerability/GHSA-ff3m-68vj-h86p"}],"summary":"PlantUML Server-Side Request Forgery vulnerability"}