{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.4.17"}],"component":"com.github.dgarijo:Widoco","cve_ids":["CVE-2022-4772"],"ecosystem":"Maven","epss":0.00296,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jj8r-jw42-mw4w","id":"tcs_01M5N932VSZPM860WK6595Q8TH","modified_at":"2023-11-08T04:11:00.653401Z","published_at":"2022-12-28T00:30:22Z","references":["https://osv.dev/vulnerability/GHSA-jj8r-jw42-mw4w","https://nvd.nist.gov/vuln/detail/CVE-2022-4772","https://github.com/dgarijo/Widoco/pull/551","https://github.com/dgarijo/Widoco/commit/f2279b76827f32190adfa9bd5229b7d5a147fa92","https://github.com/dgarijo/Widoco","https://vuldb.com/?ctiid.216914","https://vuldb.com/?id.216914"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-jj8r-jw42-mw4w","url":"https://osv.dev/vulnerability/GHSA-jj8r-jw42-mw4w"}],"summary":"Widoco Path Traversal vulnerability"}