{"action":"Upgrade org.apache.xmlgraphics:xmlgraphics-commons to 2.6 or later.","affected":[{"fixed":"2.6","introduced":"0"}],"component":"org.apache.xmlgraphics:xmlgraphics-commons","cve_ids":["CVE-2020-11988"],"ecosystem":"Maven","epss":0.0665,"exploited":false,"fixed_versions":["2.6"],"ghsa_id":"GHSA-fmj2-7wx8-qj4v","id":"tcs_01M5N8WAX8XR8Z93JKFEJNKREH","modified_at":"2024-02-17T05:31:32.239010Z","published_at":"2022-02-09T00:45:56Z","references":["https://osv.dev/vulnerability/GHSA-fmj2-7wx8-qj4v","https://nvd.nist.gov/vuln/detail/CVE-2020-11988","https://github.com/apache/xmlgraphics-commons/commit/57393912eb87b994c7fed39ddf30fb778a275183","https://github.com/apache/xmlgraphics-commons","https://issues.apache.org/jira/browse/XGC-122","https://lists.apache.org/thread.html/r2877ae10e8be56a3c52d03e373512ddd32f16b863f24c2e22f5a5ba2@%3Cdev.poi.apache.org%3E","https://lists.apache.org/thread.html/r588d05a0790b40a0eb81088252e1e8c1efb99706631421f17038eb05@%3Cdev.poi.apache.org%3E","https://lists.apache.org/thread.html/ra8f4d6ae402ec020ee3e8c28632c91be131c4d8b4c9c6756a179b12b@%3Cdev.jmeter.apache.org%3E","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/22HESSYU7T4D6GGENUVEX3X3H6FGBECH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JP4XA56DA3BFNRBBLBXM6ZAI5RUVFA33","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://xmlgraphics.apache.org/security.html"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-fmj2-7wx8-qj4v","url":"https://osv.dev/vulnerability/GHSA-fmj2-7wx8-qj4v"}],"summary":"Server-side request forgery (SSRF) in Apache XmlGraphics Commons"}