{"action":"Upgrade org.wildfly.bom:wildfly to 27.0.0.Beta1 or later.","affected":[{"fixed":"27.0.0.Beta1","introduced":"0"}],"component":"org.wildfly.bom:wildfly","cve_ids":["CVE-2022-1278"],"ecosystem":"Maven","epss":0.00861,"exploited":false,"fixed_versions":["27.0.0.Beta1"],"ghsa_id":"GHSA-fmq7-gh8v-mjvc","id":"tcs_01M5N8WC109MGZ1JA578J1PCK4","modified_at":"2023-12-06T01:01:51.527714Z","published_at":"2022-09-14T00:00:48Z","references":["https://osv.dev/vulnerability/GHSA-fmq7-gh8v-mjvc","https://nvd.nist.gov/vuln/detail/CVE-2022-1278","https://bugzilla.redhat.com/show_bug.cgi?id=2073401","https://github.com/wildfly/boms","https://issues.redhat.com/browse/WFLY-16238"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fmq7-gh8v-mjvc","url":"https://osv.dev/vulnerability/GHSA-fmq7-gh8v-mjvc"}],"summary":"WildFly vulnerable to Insecure Default Initialization of Resource"}