{"action":"Upgrade org.xwiki.platform:xwiki-platform-crypto to 13.10.6 (13.x) or 14.3.1 (14.x) or later.","affected":[{"fixed":"13.10.6","introduced":"0"},{"fixed":"14.3.1","introduced":"14.0.0"}],"component":"org.xwiki.platform:xwiki-platform-crypto","cve_ids":["CVE-2022-29161"],"ecosystem":"Maven","epss":0.00412,"exploited":false,"fixed_versions":["13.10.6","14.3.1"],"ghsa_id":"GHSA-h8v5-p258-pqf4","id":"tcs_01M5N90581R0YABQ5RC44FJS94","modified_at":"2023-11-08T04:09:08.311602Z","published_at":"2022-05-24T12:47:10Z","references":["https://osv.dev/vulnerability/GHSA-h8v5-p258-pqf4","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-h8v5-p258-pqf4","https://nvd.nist.gov/vuln/detail/CVE-2022-29161","https://github.com/xwiki/xwiki-platform/commit/26728f3f23658288683667a5182a916c7ecefc52","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-19676"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-h8v5-p258-pqf4","url":"https://osv.dev/vulnerability/GHSA-h8v5-p258-pqf4"}],"summary":"Use of a Broken or Risky Cryptographic Algorithm in XWiki Crypto API"}