{"action":"Upgrade org.apache.myfaces.core:myfaces-core-module to 2.0.11 (2.0.x) or 2.1.5 (2.1.x) or later.","affected":[{"fixed":"2.0.11","introduced":"2.0.1"},{"fixed":"2.1.5","introduced":"2.1.0"}],"component":"org.apache.myfaces.core:myfaces-core-module","cve_ids":["CVE-2011-4343"],"ecosystem":"Maven","epss":0.05334,"exploited":false,"fixed_versions":["2.0.11","2.1.5"],"ghsa_id":"GHSA-jq6g-p65r-44xr","id":"tcs_01M5N93ERWVPM0J47HBRQ6XSMA","modified_at":"2024-01-17T22:42:00.624394Z","published_at":"2022-05-17T00:29:01Z","references":["https://osv.dev/vulnerability/GHSA-jq6g-p65r-44xr","https://nvd.nist.gov/vuln/detail/CVE-2011-4343","https://github.com/apache/myfaces/commit/a74b551b2ce6e88101ff453389a761f230e428a1","https://github.com/apache/myfaces/commit/caee86e71ab8c5f038186158e9955887ed72a0fd","https://github.com/apache/myfaces","https://issues.apache.org/jira/secure/attachment/12504807/MYFACES-3405-1.patch","http://marc.info/?l=full-disclosure&m=132313252814362"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jq6g-p65r-44xr","url":"https://osv.dev/vulnerability/GHSA-jq6g-p65r-44xr"}],"summary":"Apache MyFaces Vulnerable to EL Injection"}