{"action":"Upgrade org.directwebremoting:dwr to 2.0.11 (2.x) or 3.0.RC3 (3.x) or later.","affected":[{"fixed":"2.0.11","introduced":"0"},{"fixed":"3.0.RC3","introduced":"3.0.M1"}],"component":"org.directwebremoting:dwr","cve_ids":["CVE-2014-5326"],"ecosystem":"Maven","epss":0.01148,"exploited":false,"fixed_versions":["2.0.11","3.0.RC3"],"ghsa_id":"GHSA-q5v2-2v66-6hwm","id":"tcs_01M5N98SKT5DM72PHVNCEF8FJ8","modified_at":"2024-12-07T05:38:42.459059Z","published_at":"2022-05-17T04:21:06Z","references":["https://osv.dev/vulnerability/GHSA-q5v2-2v66-6hwm","https://nvd.nist.gov/vuln/detail/CVE-2014-5326","http://jvn.jp/en/jp/JVN52422792/index.html","http://jvndb.jvn.jp/jvndb/JVNDB-2014-000118"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-q5v2-2v66-6hwm","url":"https://osv.dev/vulnerability/GHSA-q5v2-2v66-6hwm"}],"summary":"Improper Neutralization of Input During Web Page Generation in Direct Web Remoting"}