{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.3.1"}],"component":"org.apache.portals.jetspeed-2:jetspeed-commons","cve_ids":["CVE-2022-32533"],"ecosystem":"Maven","epss":0.0408,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h975-r69h-4w9p","id":"tcs_01M5N906K9M3H3B8A87FV8V3AT","modified_at":"2023-11-08T04:09:36.825519Z","published_at":"2022-07-07T00:00:28Z","references":["https://osv.dev/vulnerability/GHSA-h975-r69h-4w9p","https://nvd.nist.gov/vuln/detail/CVE-2022-32533","https://lists.apache.org/thread/d3g248pr03x8rvmh8p2t3xdlw0wn5dz2","https://www.openwall.com/lists/oss-security/2022/07/06/1","http://www.openwall.com/lists/oss-security/2022/07/06/1"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-h975-r69h-4w9p","url":"https://osv.dev/vulnerability/GHSA-h975-r69h-4w9p"}],"summary":"Insufficient user input in Apache Jetspeed-2"}