{"action":"Upgrade org.apache.tomcat:tomcat to 7.0.39 or later.","affected":[{"fixed":"7.0.39","introduced":"0"}],"component":"org.apache.tomcat:tomcat","cve_ids":["CVE-2013-2185"],"ecosystem":"Maven","epss":0.07199,"exploited":false,"fixed_versions":["7.0.39"],"ghsa_id":"GHSA-v6c7-8qx5-8gmp","id":"tcs_01M5N9DD51WYSJE0BBSZ5ZAKNV","modified_at":"2024-12-04T05:36:58.235916Z","published_at":"2022-05-17T03:47:51Z","references":["https://osv.dev/vulnerability/GHSA-v6c7-8qx5-8gmp","https://nvd.nist.gov/vuln/detail/CVE-2013-2185","https://github.com/apache/tomcat","http://openwall.com/lists/oss-security/2014/10/24/12","http://rhn.redhat.com/errata/RHSA-2013-1193.html","http://rhn.redhat.com/errata/RHSA-2013-1194.html","http://rhn.redhat.com/errata/RHSA-2013-1265.html","http://www.openwall.com/lists/oss-security/2013/09/05/4"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-v6c7-8qx5-8gmp","url":"https://osv.dev/vulnerability/GHSA-v6c7-8qx5-8gmp"}],"summary":"Deserialization of Untrusted Data in Apache Tomcat"}