{"action":"Upgrade org.apache.servicecomb:java-chassis to 1.3.2 (1.x) or 2.1.5 (2.x) or later.","affected":[{"fixed":"1.3.2","introduced":"1.0.0"},{"fixed":"2.1.5","introduced":"2.0.0"}],"component":"org.apache.servicecomb:java-chassis","cve_ids":["CVE-2020-17532"],"ecosystem":"Maven","epss":0.03381,"exploited":false,"fixed_versions":["1.3.2","2.1.5"],"ghsa_id":"GHSA-px4w-rcv2-6x8x","id":"tcs_01M5N988PCJC6MWZ83543P88VW","modified_at":"2023-11-08T04:02:43.003658Z","published_at":"2022-02-09T22:19:00Z","references":["https://osv.dev/vulnerability/GHSA-px4w-rcv2-6x8x","https://nvd.nist.gov/vuln/detail/CVE-2020-17532","https://github.com/apache/servicecomb-java-chassis/commit/839a52e27c754cb5ce14f20063902f21065bd26c","https://github.com/apache/servicecomb-java-chassis/commit/ba4fb37b6ab8bd3a6c3d0693f295d99a94879838","https://issues.apache.org/jira/browse/SCB-2145","https://seclists.org/oss-sec/2021/q1/60"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-px4w-rcv2-6x8x","url":"https://osv.dev/vulnerability/GHSA-px4w-rcv2-6x8x"}],"summary":"Arbitrary code execution in Apache ServiceComb java-chassis"}