{"action":"Upgrade org.xwiki.platform:xwiki-platform-filter-ui to the fixed version for your line (see fixed_versions).","affected":[{"fixed":"13.10.8","introduced":"0"},{"fixed":"14.4.3","introduced":"14.0.0"},{"fixed":"14.6-rc-1","introduced":"14.5.0"}],"component":"org.xwiki.platform:xwiki-platform-filter-ui","cve_ids":["CVE-2022-41937"],"ecosystem":"Maven","epss":0.00823,"exploited":false,"fixed_versions":["13.10.8","14.4.3","14.6-rc-1"],"ghsa_id":"GHSA-q6jp-gcww-8v2j","id":"tcs_01M5N98W1FB3K3CFW39BD64ZCC","modified_at":"2023-11-08T04:10:36.548319Z","published_at":"2022-11-21T23:46:47Z","references":["https://osv.dev/vulnerability/GHSA-q6jp-gcww-8v2j","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-q6jp-gcww-8v2j","https://nvd.nist.gov/vuln/detail/CVE-2022-41937","https://github.com/xwiki/xwiki-platform/commit/fb49b4f289ee28e45cfada8e97e320cd3ed27113","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-19758"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"GHSA-q6jp-gcww-8v2j","url":"https://osv.dev/vulnerability/GHSA-q6jp-gcww-8v2j"}],"summary":"Missing Authorization in Filter Stream Converter Application of XWiki-platform"}