{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.2.5"}],"component":"net.mingsoft:ms-mcms","cve_ids":["CVE-2021-46385"],"ecosystem":"Maven","epss":0.01524,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-phwq-9gc4-q5c8","id":"tcs_01M5N97JWE1DYVTE38RTPANFKX","modified_at":"2024-02-16T08:16:19.836966Z","published_at":"2022-01-27T00:00:52Z","references":["https://osv.dev/vulnerability/GHSA-phwq-9gc4-q5c8","https://nvd.nist.gov/vuln/detail/CVE-2021-46385","https://github.com/ming-soft/MCMS/issues/99","https://gitee.com/mingSoft/MCMS/issues/I4QZ1K"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-phwq-9gc4-q5c8","url":"https://osv.dev/vulnerability/GHSA-phwq-9gc4-q5c8"}],"summary":"Mingsoft MCMS SQL injection vulnerability"}