{"action":"Upgrade com.jamonapi:jamon to 2.80 or later.","affected":[{"fixed":"2.80","introduced":"0"}],"component":"com.jamonapi:jamon","cve_ids":["CVE-2013-6235"],"ecosystem":"Maven","epss":0.02232,"exploited":false,"fixed_versions":["2.80"],"ghsa_id":"GHSA-qpr7-5m63-hq2c","id":"tcs_01M5N9A0SC9KQ1KPDW1S4FWERQ","modified_at":"2024-12-05T05:56:52.490841Z","published_at":"2022-05-14T02:54:05Z","references":["https://osv.dev/vulnerability/GHSA-qpr7-5m63-hq2c","https://nvd.nist.gov/vuln/detail/CVE-2013-6235","https://exchange.xforce.ibmcloud.com/vulnerabilities/90699","http://osvdb.org/102570","http://osvdb.org/102571","http://osvdb.org/102572","http://osvdb.org/102573","http://packetstormsecurity.com/files/124933","http://seclists.org/fulldisclosure/2014/Jan/164","http://www.securityfocus.com/archive/1/530877/100/0/threaded"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-qpr7-5m63-hq2c","url":"https://osv.dev/vulnerability/GHSA-qpr7-5m63-hq2c"}],"summary":"Improper Neutralization of Input During Web Page Generation in JAMon"}