{"action":"Upgrade com.google.gerrit:gerrit-plugin-api to 2.14.22 (2.14.x), 2.15.21 (2.15.x), 2.16.25 (2.16.x), 3.0.15 (3.0.x), 3.1.10 (3.1.x) or 3.2.5 (3.2.x) or later.","affected":[{"fixed":"2.14.22","introduced":"0"},{"fixed":"2.15.21","introduced":"2.15.0"},{"fixed":"2.16.25","introduced":"2.16.0"},{"fixed":"3.0.15","introduced":"3.0.0"},{"fixed":"3.1.10","introduced":"3.1.0"},{"fixed":"3.2.5","introduced":"3.2.0"}],"component":"com.google.gerrit:gerrit-plugin-api","cve_ids":["CVE-2020-8920"],"ecosystem":"Maven","epss":0.00372,"exploited":false,"fixed_versions":["2.14.22","2.15.21","2.16.25","3.0.15","3.1.10","3.2.5"],"ghsa_id":"GHSA-g5q2-cxgq-h2rw","id":"tcs_01M5N8XEN6PGBYXER40TPYEZAW","modified_at":"2024-11-30T05:30:30.737579Z","published_at":"2022-05-24T17:35:58Z","references":["https://osv.dev/vulnerability/GHSA-g5q2-cxgq-h2rw","https://nvd.nist.gov/vuln/detail/CVE-2020-8920","https://gerrit.googlesource.com/gerrit/+/45071d6977932bca5a1427c8abad24710fed2e33","https://issues.gerritcodereview.com/issues/40012986","https://www.gerritcodereview.com/2.14.html#21422","https://www.gerritcodereview.com/2.15.html#21521","https://www.gerritcodereview.com/2.16.html#21625","https://www.gerritcodereview.com/3.0.html#3015","https://www.gerritcodereview.com/3.1.html#3110","https://www.gerritcodereview.com/3.2.html#325"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-g5q2-cxgq-h2rw","url":"https://osv.dev/vulnerability/GHSA-g5q2-cxgq-h2rw"}],"summary":"Information leak in Gerrit"}