{"action":"Upgrade org.apache.sling:org.apache.sling.i18n to 2.6.2 or later.","affected":[{"fixed":"2.6.2","introduced":"0"}],"component":"org.apache.sling:org.apache.sling.i18n","cve_ids":["CVE-2023-25621"],"ecosystem":"Maven","epss":0.01148,"exploited":false,"fixed_versions":["2.6.2"],"ghsa_id":"GHSA-mrpv-5pmr-p92h","id":"tcs_01M5N95QW88QRYYMB7VKDE6SXK","modified_at":"2023-11-08T04:11:52.794751Z","published_at":"2023-02-23T09:30:17Z","references":["https://osv.dev/vulnerability/GHSA-mrpv-5pmr-p92h","https://nvd.nist.gov/vuln/detail/CVE-2023-25621","https://github.com/apache/sling-org-apache-sling-i18n/pull/9","https://issues.apache.org/jira/browse/SLING-11744","https://seclists.org/oss-sec/2023/q1/112","https://sling.apache.org/news.html"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-mrpv-5pmr-p92h","url":"https://osv.dev/vulnerability/GHSA-mrpv-5pmr-p92h"}],"summary":"Improper Privilege Management in Apache Sling"}