{"action":"Upgrade org.apache.streampark:streampark to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"1.0.0"}],"component":"org.apache.streampark:streampark","cve_ids":["CVE-2022-45801"],"ecosystem":"Maven","epss":0.01103,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-pjfj-qvqw-3f6v","id":"tcs_01M5N97N0P042H4GY3ZS2G9DPX","modified_at":"2023-11-08T04:10:53.760992Z","published_at":"2023-05-01T15:30:26Z","references":["https://osv.dev/vulnerability/GHSA-pjfj-qvqw-3f6v","https://nvd.nist.gov/vuln/detail/CVE-2022-45801","https://github.com/apache/incubator-streampark","https://lists.apache.org/thread/xbkwwpkp3n2rs2wcxg8l26mhsftxwwr9"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-pjfj-qvqw-3f6v","url":"https://osv.dev/vulnerability/GHSA-pjfj-qvqw-3f6v"}],"summary":"Apache StreamPark LDAP Injection vulnerability"}