{"action":"Upgrade org.exist-db:exist-core to 5.1.0 or later.","affected":[{"fixed":"5.1.0","introduced":"0"}],"component":"org.exist-db:exist-core","cve_ids":["CVE-2018-1000823"],"ecosystem":"Maven","epss":0.01879,"exploited":false,"fixed_versions":["5.1.0"],"ghsa_id":"GHSA-jxm5-5xcw-h57q","id":"tcs_01M5N93ZWVNQEY2M80TS5SRQNX","modified_at":"2024-02-19T05:33:45.559912Z","published_at":"2018-12-20T22:02:17Z","references":["https://osv.dev/vulnerability/GHSA-jxm5-5xcw-h57q","https://nvd.nist.gov/vuln/detail/CVE-2018-1000823","https://github.com/eXist-db/exist/issues/2180","https://github.com/eXist-db/exist/pull/2243","https://github.com/eXist-db/exist/pull/2247","https://github.com/eXist-db/exist/commit/1c3f0aec14d00bdbca175713af70cb7c7b868e9f","https://github.com/eXist-db/exist/commit/b210f9fbf379b68842f2b055dda80d7e7479e96f","https://0dd.zone/2018/10/27/exist-XXE","https://github.com/advisories/GHSA-jxm5-5xcw-h57q","https://github.com/eXist-db/exist"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-jxm5-5xcw-h57q","url":"https://osv.dev/vulnerability/GHSA-jxm5-5xcw-h57q"}],"summary":"exist-db:exist-core XML External Entity (XXE) vulnerability"}