{"action":"Upgrade org.apache.tomee:apache-tomee to 7.0.9 (7.0.x), 7.1.4 (7.1.x) or 8.0.4 (8.0.x) or later.","affected":[{"fixed":"8.0.4","introduced":"8.0.0"},{"fixed":"7.1.4","introduced":"7.1.0"},{"fixed":"7.0.9","introduced":"0"}],"component":"org.apache.tomee:apache-tomee","cve_ids":["CVE-2020-13931"],"ecosystem":"Maven","epss":0.03699,"exploited":false,"fixed_versions":["8.0.4","7.1.4","7.0.9"],"ghsa_id":"GHSA-mp28-rq7g-qx62","id":"tcs_01M5N95FFKNHEJNQXNZG1NGP9R","modified_at":"2023-11-08T04:02:22.832603Z","published_at":"2022-02-09T22:44:38Z","references":["https://osv.dev/vulnerability/GHSA-mp28-rq7g-qx62","https://nvd.nist.gov/vuln/detail/CVE-2020-13931","https://lists.apache.org/thread.html/r7f98907165b355dc65f28a57f15103a06173ce03261115fa46d569b4@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/r85b87478f8aa4751aa3a06e88622e80ffabae376ee7283e147ee56b9@%3Cdev.tomee.apache.org%3E","https://lists.apache.org/thread.html/ref088c4732e1a8dd0bbbb96e13ffafcfe65f984238ffa55f438d78fe%40%3Cdev.tomee.apache.org%3E"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mp28-rq7g-qx62","url":"https://osv.dev/vulnerability/GHSA-mp28-rq7g-qx62"}],"summary":"Remote code execution in Apache TomEE"}