{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.8"}],"component":"com.whaleal.icefrog:icefrog-all","cve_ids":["CVE-2023-3308"],"ecosystem":"Maven","epss":0.01115,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rx62-5cw6-x29q","id":"tcs_01M5N9CT8CMNJF3ECXEPXZBF57","modified_at":"2024-03-01T14:55:57.204601Z","published_at":"2023-06-18T09:30:17Z","references":["https://osv.dev/vulnerability/GHSA-rx62-5cw6-x29q","https://nvd.nist.gov/vuln/detail/CVE-2023-3308","https://github.com/NanKeXXX/selfVuln_poc/blob/main/whaleal%3Aicefrog/icefrog_1.1.8_RCE.md","https://github.com/NanKeXXX/selfVuln_poc/blob/main/whaleal:icefrog/icefrog_1.1.8_RCE.md","https://github.com/whaleal/icefrog","https://vuldb.com/?ctiid.231804","https://vuldb.com/?id.231804"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-rx62-5cw6-x29q","url":"https://osv.dev/vulnerability/GHSA-rx62-5cw6-x29q"}],"summary":"Whaleal IceFrog is vulnerable to deserialization"}