{"action":"Upgrade org.apache.olingo:odata-client-core to 4.7.1 or later.","affected":[{"fixed":"4.7.1","introduced":"4.0.0"}],"component":"org.apache.olingo:odata-client-core","cve_ids":["CVE-2020-1925"],"ecosystem":"Maven","epss":0.0283,"exploited":false,"fixed_versions":["4.7.1"],"ghsa_id":"GHSA-v4qh-6367-4cx2","id":"tcs_01M5N9D75FR7JC6HH2A1CQS8Z9","modified_at":"2023-11-08T04:02:45.437952Z","published_at":"2020-02-04T22:38:38Z","references":["https://osv.dev/vulnerability/GHSA-v4qh-6367-4cx2","https://nvd.nist.gov/vuln/detail/CVE-2020-1925","https://mail-archives.apache.org/mod_mbox/olingo-user/202001.mbox/%3CCAGSZ4d6HwpF2woOrZJg_d0SkHytXJaCtAWXa3ZtBn33WG0YFvw%40mail.gmail.com%3E"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-v4qh-6367-4cx2","url":"https://osv.dev/vulnerability/GHSA-v4qh-6367-4cx2"}],"summary":"Server-Side Request Forgery (SSRF) in Apache Olingo"}