{"action":"Upgrade io.apiman:apiman-manager-api-rest-impl to 3.0.0.Final or later.","affected":[{"fixed":"3.0.0.Final","introduced":"1.5.7"}],"component":"io.apiman:apiman-manager-api-rest-impl","cve_ids":["CVE-2022-47551"],"ecosystem":"Maven","epss":0.00644,"exploited":false,"fixed_versions":["3.0.0.Final"],"ghsa_id":"GHSA-j94p-hv25-rm5g","id":"tcs_01M5N92GCJFHCAQE30HBEK0S0N","modified_at":"2024-12-08T05:34:13.770394Z","published_at":"2023-01-03T12:28:06Z","references":["https://osv.dev/vulnerability/GHSA-j94p-hv25-rm5g","https://github.com/apiman/apiman/security/advisories/GHSA-j94p-hv25-rm5g","https://nvd.nist.gov/vuln/detail/CVE-2022-47551","https://github.com/advisories/GHSA-54r5-wr8x-x5v3","https://github.com/apiman/apiman","https://github.com/orgs/apiman/discussions/2409","https://www.apiman.io/blog/permissions-bypass-disclosure"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-j94p-hv25-rm5g","url":"https://osv.dev/vulnerability/GHSA-j94p-hv25-rm5g"}],"summary":"Apiman has potential permissions bypass"}