{"action":"Upgrade org.apache.inlong:manager-web to 1.7.0 or later.","affected":[{"fixed":"1.7.0","introduced":"1.5.0"}],"component":"org.apache.inlong:manager-web","cve_ids":["CVE-2023-31101"],"ecosystem":"Maven","epss":0.0111,"exploited":false,"fixed_versions":["1.7.0"],"ghsa_id":"GHSA-h79m-5cm2-278c","id":"tcs_01M5N8ZZCM11XKZYWN2T11ZGZN","modified_at":"2024-02-16T08:02:59.770920Z","published_at":"2023-05-22T18:30:27Z","references":["https://osv.dev/vulnerability/GHSA-h79m-5cm2-278c","https://nvd.nist.gov/vuln/detail/CVE-2023-31101","https://github.com/apache/inlong/pull/7836","https://github.com/apache/inlong","https://lists.apache.org/thread/shvwwr6toqz5rr39rwh4k03z08sh9jmr"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-h79m-5cm2-278c#Maven/org.apache.inlong:manager-web","url":"https://osv.dev/vulnerability/GHSA-h79m-5cm2-278c"}],"summary":"User data exposure in Apache InLong"}