{"action":"Upgrade io.pivotal.spring.cloud:spring-cloud-sso-connector to 2.1.3.RELEASE or later.","affected":[{"fixed":"2.1.3.RELEASE","introduced":"2.1.2.RELEASE"}],"component":"io.pivotal.spring.cloud:spring-cloud-sso-connector","cve_ids":["CVE-2018-1256"],"ecosystem":"Maven","epss":0.01578,"exploited":false,"fixed_versions":["2.1.3.RELEASE"],"ghsa_id":"GHSA-q4q2-93pw-qwgf","id":"tcs_01M5N98MMMA9J7BE1721PVYDVC","modified_at":"2024-03-04T20:48:59Z","published_at":"2022-05-13T01:07:05Z","references":["https://osv.dev/vulnerability/GHSA-q4q2-93pw-qwgf","https://nvd.nist.gov/vuln/detail/CVE-2018-1256","https://github.com/pivotal-cf/spring-cloud-sso-connector/commit/ef647a2acf2363c6018e8543d665ac8862593372","https://pivotal.io/security/cve-2018-1256"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-q4q2-93pw-qwgf","url":"https://osv.dev/vulnerability/GHSA-q4q2-93pw-qwgf"}],"summary":"Issuer validation regression in Spring Cloud SSO Connector"}