{"action":"Upgrade org.xwiki.platform:xwiki-platform-xar-model to the fixed version for your line (see fixed_versions).","affected":[{"fixed":"13.10.11","introduced":"1.1-milestone-3"},{"fixed":"14.4.7","introduced":"14.0"},{"fixed":"14.10-rc-1","introduced":"14.5"}],"component":"org.xwiki.platform:xwiki-platform-xar-model","cve_ids":["CVE-2023-27480"],"ecosystem":"Maven","epss":0.00746,"exploited":false,"fixed_versions":["13.10.11","14.4.7","14.10-rc-1"],"ghsa_id":"GHSA-gx4f-976g-7g6v","id":"tcs_01M5N8Z74Z171F64QXQSVXZC8Q","modified_at":"2023-11-08T04:12:04.667210Z","published_at":"2023-03-08T17:19:30Z","references":["https://osv.dev/vulnerability/GHSA-gx4f-976g-7g6v","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-gx4f-976g-7g6v","https://nvd.nist.gov/vuln/detail/CVE-2023-27480","https://github.com/xwiki/xwiki-platform/commit/e3527b98fdd8dc8179c24dc55e662b2c55199434","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-20320"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-gx4f-976g-7g6v","url":"https://osv.dev/vulnerability/GHSA-gx4f-976g-7g6v"}],"summary":"XWiki Platform vulnerable to data leak via Improper Restriction of XML External Entity Reference"}