{"action":"Upgrade org.cometd.java:cometd-java-oort to 5.0.11 (5.x), 6.0.6 (6.x) or 7.0.6 (7.x) or later.","affected":[{"fixed":"5.0.11","introduced":"0"},{"fixed":"6.0.6","introduced":"6.0.0"},{"fixed":"7.0.6","introduced":"7.0.0"}],"component":"org.cometd.java:cometd-java-oort","cve_ids":["CVE-2022-24721"],"ecosystem":"Maven","epss":0.01146,"exploited":false,"fixed_versions":["5.0.11","6.0.6","7.0.6"],"ghsa_id":"GHSA-rjmq-6v55-4rjv","id":"tcs_01M5N9C0E8JA2SCDC914YY6MY4","modified_at":"2023-11-08T04:08:33.593987Z","published_at":"2022-03-15T19:02:36Z","references":["https://osv.dev/vulnerability/GHSA-rjmq-6v55-4rjv","https://github.com/cometd/cometd/security/advisories/GHSA-rjmq-6v55-4rjv","https://nvd.nist.gov/vuln/detail/CVE-2022-24721","https://github.com/cometd/cometd/issues/1146","https://github.com/cometd/cometd/commit/bb445a143fbf320f17c62e340455cd74acfb5929","https://github.com/cometd/cometd"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-rjmq-6v55-4rjv","url":"https://osv.dev/vulnerability/GHSA-rjmq-6v55-4rjv"}],"summary":"Improper Authorization in org.cometd.oort"}