{"action":"Upgrade net.mingsoft:ms-mcms to 5.1 or later.","affected":[{"fixed":"5.1","introduced":"0"}],"component":"net.mingsoft:ms-mcms","cve_ids":["CVE-2020-20913"],"ecosystem":"Maven","epss":0.01423,"exploited":false,"fixed_versions":["5.1"],"ghsa_id":"GHSA-hx8p-9m48-g76r","id":"tcs_01M5N91KTRZPPWGNG6DRMFTBYV","modified_at":"2025-02-14T18:49:35.286574Z","published_at":"2023-04-04T15:30:27Z","references":["https://osv.dev/vulnerability/GHSA-hx8p-9m48-g76r","https://nvd.nist.gov/vuln/detail/CVE-2020-20913","https://github.com/ming-soft/MCMS/issues/27","https://github.com/ming-soft/MCMS"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-hx8p-9m48-g76r","url":"https://osv.dev/vulnerability/GHSA-hx8p-9m48-g76r"}],"summary":"Ming-Soft MCMS vulnerable to SQL injection"}