{"action":"Upgrade org.drools:drools-core to 7.69.0.Final or later.","affected":[{"fixed":"7.69.0.Final","introduced":"0"}],"component":"org.drools:drools-core","cve_ids":["CVE-2022-1415"],"ecosystem":"Maven","epss":0.01044,"exploited":false,"fixed_versions":["7.69.0.Final"],"ghsa_id":"GHSA-m5q8-58wh-xxq4","id":"tcs_01M5N94DW2E22RWYQMP29EQEPF","modified_at":"2024-05-03T20:35:13.995086Z","published_at":"2023-09-11T21:30:17Z","references":["https://osv.dev/vulnerability/GHSA-m5q8-58wh-xxq4","https://nvd.nist.gov/vuln/detail/CVE-2022-1415","https://access.redhat.com/errata/RHSA-2022:6813","https://access.redhat.com/security/cve/CVE-2022-1415","https://bugzilla.redhat.com/show_bug.cgi?id=2065505"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-m5q8-58wh-xxq4","url":"https://osv.dev/vulnerability/GHSA-m5q8-58wh-xxq4"}],"summary":"Drools Core Deserialization of Untrusted Data vulnerability"}