{"action":"Upgrade org.xwiki.commons:xwiki-commons-xml to the fixed version for your line (see fixed_versions).","affected":[{"fixed":"12.10.10","introduced":"2.7"},{"fixed":"13.4.4","introduced":"13.0.0"},{"fixed":"13.8-rc-1","introduced":"13.5-rc-1"}],"component":"org.xwiki.commons:xwiki-commons-xml","cve_ids":["CVE-2022-24898"],"ecosystem":"Maven","epss":0.01485,"exploited":false,"fixed_versions":["12.10.10","13.4.4","13.8-rc-1"],"ghsa_id":"GHSA-m2r5-4w96-qxg5","id":"tcs_01M5N942YMTMD435ZS6RYBRS3W","modified_at":"2023-11-08T04:08:39.783639Z","published_at":"2022-04-28T19:31:55Z","references":["https://osv.dev/vulnerability/GHSA-m2r5-4w96-qxg5","https://github.com/xwiki/xwiki-commons/security/advisories/GHSA-m2r5-4w96-qxg5","https://nvd.nist.gov/vuln/detail/CVE-2022-24898","https://github.com/xwiki/xwiki-commons/commit/947e8921ebd95462d5a7928f397dd1b64f77c7d5","https://github.com/xwiki/xwiki-commons","https://jira.xwiki.org/browse/XWIKI-18946"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-m2r5-4w96-qxg5","url":"https://osv.dev/vulnerability/GHSA-m2r5-4w96-qxg5"}],"summary":"Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml"}