{"action":"Upgrade org.glassfish:mojarra-parent to 2.3.14 or later.","affected":[{"fixed":"2.3.14","introduced":"0"}],"component":"org.glassfish:mojarra-parent","cve_ids":["CVE-2020-6950"],"ecosystem":"Maven","epss":0.10124,"exploited":false,"fixed_versions":["2.3.14"],"ghsa_id":"GHSA-rpq8-mmwh-q9hm","id":"tcs_01M5N9C871QM99C4FVBKHVJBTQ","modified_at":"2023-11-08T04:03:57.548203Z","published_at":"2021-09-01T18:23:58Z","references":["https://osv.dev/vulnerability/GHSA-rpq8-mmwh-q9hm","https://nvd.nist.gov/vuln/detail/CVE-2020-6950","https://github.com/eclipse-ee4j/mojarra/issues/4571","https://github.com/eclipse-ee4j/mojarra/commit/cefbb9447e7be560e59da2da6bd7cb93776f7741","https://bugs.eclipse.org/bugs/show_bug.cgi?id=550943","https://github.com/eclipse-ee4j/mojarra","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rpq8-mmwh-q9hm","url":"https://osv.dev/vulnerability/GHSA-rpq8-mmwh-q9hm"}],"summary":"Directory traversal in Eclipse Mojarra"}