{"action":"Upgrade io.fusionauth:fusionauth-java-client to 1.41.3 or later.","affected":[{"fixed":"1.41.3","introduced":"1.37.0"}],"component":"io.fusionauth:fusionauth-java-client","cve_ids":["CVE-2022-45921"],"ecosystem":"Maven","epss":0.00736,"exploited":false,"fixed_versions":["1.41.3"],"ghsa_id":"GHSA-rmcx-fg5w-x8j9","id":"tcs_01M5N9C2C8QGEJYDQ3XRMDQ1PA","modified_at":"2023-11-08T04:10:54.309535Z","published_at":"2022-11-28T21:30:21Z","references":["https://osv.dev/vulnerability/GHSA-rmcx-fg5w-x8j9","https://nvd.nist.gov/vuln/detail/CVE-2022-45921","https://github.com/FusionAuth/fusionauth-issues/issues/1983","https://fusionauth.io/docs/v1/tech/release-notes","https://github.com/FusionAuth/fusionauth-java-client"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rmcx-fg5w-x8j9","url":"https://osv.dev/vulnerability/GHSA-rmcx-fg5w-x8j9"}],"summary":"FusionAuth vulnerable to directory traversal attack"}