{"action":"Upgrade net.sourceforge.plantuml:plantuml-mit to 1.2023.9 or later.","affected":[{"fixed":"1.2023.9","introduced":"0"}],"component":"net.sourceforge.plantuml:plantuml-mit","cve_ids":["CVE-2023-3431"],"ecosystem":"Maven","epss":0.00866,"exploited":false,"fixed_versions":["1.2023.9"],"ghsa_id":"GHSA-p2mf-q26j-3xmh","id":"tcs_01M5N967745PSH733M7D0R8ZJG","modified_at":"2024-02-20T05:20:22.368954Z","published_at":"2023-06-27T15:30:28Z","references":["https://osv.dev/vulnerability/GHSA-p2mf-q26j-3xmh","https://nvd.nist.gov/vuln/detail/CVE-2023-3431","https://github.com/plantuml/plantuml/commit/fbe7fa3b25b4c887d83927cffb1009ec6cb8ab1e","https://github.com/plantuml/plantuml","https://huntr.dev/bounties/fa741f95-b53c-4ed7-b157-e32c5145164c","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FV7XL3CY3K3K5ER3ASMEQA546MIQQ7QM"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-p2mf-q26j-3xmh","url":"https://osv.dev/vulnerability/GHSA-p2mf-q26j-3xmh"}],"summary":"PlantUML Improper Access Control vulnerability"}