{"action":"Upgrade org.apache.shiro:shiro-core to 1.4.2 or later.","affected":[{"fixed":"1.4.2","introduced":"0"}],"component":"org.apache.shiro:shiro-core","cve_ids":["CVE-2019-12422"],"ecosystem":"Maven","epss":0.09101,"exploited":false,"fixed_versions":["1.4.2"],"ghsa_id":"GHSA-r679-m633-g7wc","id":"tcs_01M5N9B2VQ33N9TVNM8SYBK7DM","modified_at":"2024-12-05T05:38:38.036634Z","published_at":"2020-02-04T22:36:36Z","references":["https://osv.dev/vulnerability/GHSA-r679-m633-g7wc","https://nvd.nist.gov/vuln/detail/CVE-2019-12422","https://lists.apache.org/thread.html/c9db14cfebfb8e74205884ed2bf2e2b30790ce24b7dde9191c82572c@%3Cdev.shiro.apache.org%3E","https://lists.apache.org/thread.html/r2d2612c034ab21a3a19d2132d47d3e4aa70105008dd58af62b653040@%3Ccommits.shiro.apache.org%3E"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-r679-m633-g7wc","url":"https://osv.dev/vulnerability/GHSA-r679-m633-g7wc"}],"summary":"Improper input validation in Apache Shiro"}