{"action":"Upgrade org.apache.synapse:synapse-core to 3.0.1 or later.","affected":[{"fixed":"3.0.1","introduced":"0"}],"component":"org.apache.synapse:synapse-core","cve_ids":["CVE-2017-15708"],"ecosystem":"Maven","epss":0.1788,"exploited":false,"fixed_versions":["3.0.1"],"ghsa_id":"GHSA-p694-23q3-rvrc","id":"tcs_01M5N96NBERHY58MCRW6Z57AVF","modified_at":"2023-11-08T03:58:58.363047Z","published_at":"2020-11-04T18:23:25Z","references":["https://osv.dev/vulnerability/GHSA-p694-23q3-rvrc","https://nvd.nist.gov/vuln/detail/CVE-2017-15708","https://lists.apache.org/thread.html/77f2accf240d25d91b47033e2f8ebec84ffbc6e6627112b2f98b66c9@%3Cdev.synapse.apache.org%3E","https://lists.apache.org/thread.html/r0fb289cd38c915b9a13a3376134f96222dd9100f1ef66b41631865c6@%3Ccommits.doris.apache.org%3E","https://security.gentoo.org/glsa/202107-37","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","http://www.securityfocus.com/bid/102154"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-p694-23q3-rvrc","url":"https://osv.dev/vulnerability/GHSA-p694-23q3-rvrc"}],"summary":"Remote Code Execution in Apache Synapse"}