{"action":"Upgrade org.apache.calcite:calcite-splunk to 1.26.0 or later.","affected":[{"fixed":"1.26.0","introduced":"0"}],"component":"org.apache.calcite:calcite-splunk","cve_ids":["CVE-2020-13955"],"ecosystem":"Maven","epss":0.02149,"exploited":false,"fixed_versions":["1.26.0"],"ghsa_id":"GHSA-hxp5-8pgq-mgv9","id":"tcs_01M5N91N4KW2F5HPC71623SGD2","modified_at":"2023-11-08T04:02:24.261790Z","published_at":"2021-04-22T16:14:14Z","references":["https://osv.dev/vulnerability/GHSA-hxp5-8pgq-mgv9","https://nvd.nist.gov/vuln/detail/CVE-2020-13955","https://github.com/apache/calcite/commit/43eeafcbac29d02c72bd520c003cdfc571de2d15","https://issues.apache.org/jira/browse/CALCITE-4298","https://lists.apache.org/thread.html/r0b0fbe2038388175951ce1028182d980f9e9a7328be13d52dab70bb3%40%3Cdev.calcite.apache.org%3E"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-hxp5-8pgq-mgv9#Maven/org.apache.calcite:calcite-splunk","url":"https://osv.dev/vulnerability/GHSA-hxp5-8pgq-mgv9"}],"summary":"Missing Authentication for Critical Function in Apache Calcite"}