{"action":"Upgrade org.vivoweb:vitro-project to 1.11.0 or later.","affected":[{"fixed":"1.11.0","introduced":"0"}],"component":"org.vivoweb:vitro-project","cve_ids":["CVE-2019-6986"],"ecosystem":"Maven","epss":0.03016,"exploited":false,"fixed_versions":["1.11.0"],"ghsa_id":"GHSA-hgq9-q8g2-3jmg","id":"tcs_01M5N90NFV2G7C59P1EDCH1WT7","modified_at":"2024-02-16T08:08:49.908321Z","published_at":"2022-05-13T01:22:47Z","references":["https://osv.dev/vulnerability/GHSA-hgq9-q8g2-3jmg","https://nvd.nist.gov/vuln/detail/CVE-2019-6986","https://github.com/vivo-project/Vitro/pull/111","https://github.com/vivo-project/Vitro/pull/111/commits/248ef19107a5ac6f86304fd8f3bc75f3787f8d49","https://github.com/kevinbackhouse/SecurityExploits/tree/0ec74459ac53685a7959ed58d580ef8abece3685/vivo-project","https://github.com/vivo-project/Vitro","https://jira.duraspace.org/browse/VIVO-1697","http://packetstormsecurity.com/files/172838/VIVO-SPARQL-Injection.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-hgq9-q8g2-3jmg","url":"https://osv.dev/vulnerability/GHSA-hgq9-q8g2-3jmg"}],"summary":"Command Injection in VIVO Vitro"}