{"action":"Upgrade org.codehaus.groovy:groovy-all to 2.4.21 (2.4.x), 2.5.14 (2.5.x) or 3.0.7 (3.0.x) or later.","affected":[{"fixed":"2.4.21","introduced":"2.0.0"},{"fixed":"2.5.14","introduced":"2.5.0"},{"fixed":"3.0.7","introduced":"3.0.0"}],"component":"org.codehaus.groovy:groovy-all","cve_ids":["CVE-2020-17521"],"ecosystem":"Maven","epss":0.01027,"exploited":false,"fixed_versions":["2.4.21","2.5.14","3.0.7"],"ghsa_id":"GHSA-rcjj-h6gh-jf3r","id":"tcs_01M5N9BJRJWZGA44FW07SHDH2P","modified_at":"2024-10-17T16:22:52.000206Z","published_at":"2020-12-09T19:03:03Z","references":["https://osv.dev/vulnerability/GHSA-rcjj-h6gh-jf3r","https://nvd.nist.gov/vuln/detail/CVE-2020-17521","https://github.com/apache/groovy/pull/1425","https://github.com/apache/groovy/commit/bcbe5c4c76db83736166530647c024ac1e47ef28","https://github.com/apache/groovy","https://groovy-lang.org/security.html#CVE-2020-17521","https://lists.apache.org/thread.html/r4b2f13c302eec98838ff7475253091fb9b75bc1038016ba00ebf6c08@%3Cdev.atlas.apache.org%3E","https://lists.apache.org/thread.html/ra9dab34bf8625511f23692ad0fcee2725f782e9aad6c5cdff6cf4465@%3Cnotifications.groovy.apache.org%3E","https://lists.apache.org/thread.html/rea63a4666ba245d2892471307772a2d8ce0f0741f341d6576625c1b3@%3Cdev.atlas.apache.org%3E","https://security.netapp.com/advisory/ntap-20201218-0006","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-rcjj-h6gh-jf3r#Maven/org.codehaus.groovy:groovy-all","url":"https://osv.dev/vulnerability/GHSA-rcjj-h6gh-jf3r"}],"summary":"Information Disclosure in Apache Groovy"}