{"action":"Upgrade com.ctrip.framework.apollo:apollo to 2.1.0 or later.","affected":[{"fixed":"2.1.0","introduced":"0"}],"component":"com.ctrip.framework.apollo:apollo","cve_ids":["CVE-2023-25569"],"ecosystem":"Maven","epss":0.00351,"exploited":false,"fixed_versions":["2.1.0"],"ghsa_id":"GHSA-fmxq-v8mg-qh25","id":"tcs_01M5N8WD1GHJ8Q1GK7M3Y2ZMTX","modified_at":"2023-11-08T04:11:52.171959Z","published_at":"2023-02-22T21:58:27Z","references":["https://osv.dev/vulnerability/GHSA-fmxq-v8mg-qh25","https://github.com/apolloconfig/apollo/security/advisories/GHSA-fmxq-v8mg-qh25","https://nvd.nist.gov/vuln/detail/CVE-2023-25569","https://github.com/apolloconfig/apollo/pull/4664","https://github.com/apolloconfig/apollo/commit/00d968a7229f809b0d8ed0532e8c01a6c2b7c750","https://github.com/apolloconfig/apollo","https://github.com/apolloconfig/apollo/releases/tag/v2.1.0","https://www.apolloconfig.com/#/en/usage/apollo-user-guide?id=_71-security-related"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-fmxq-v8mg-qh25","url":"https://osv.dev/vulnerability/GHSA-fmxq-v8mg-qh25"}],"summary":"apollo-portal has potential CSRF issue"}