{"action":"Upgrade org.apache.unomi:unomi to 1.5.4 or later.","affected":[{"fixed":"1.5.4","introduced":"0"}],"component":"org.apache.unomi:unomi","cve_ids":["CVE-2020-11975"],"ecosystem":"Maven","epss":0.3061,"exploited":false,"fixed_versions":["1.5.4"],"ghsa_id":"GHSA-v6fq-q792-j46j","id":"tcs_01M5N9DDJKA2SS69F5YZRGTG4K","modified_at":"2023-11-08T04:02:08.117151Z","published_at":"2022-02-09T23:20:47Z","references":["https://osv.dev/vulnerability/GHSA-v6fq-q792-j46j","https://nvd.nist.gov/vuln/detail/CVE-2020-11975","https://lists.apache.org/thread.html/r01021bc4b25c1e98812efca0b07f0e078a6281bd52f7c3817a429d95@%3Ccommits.unomi.apache.org%3E","https://lists.apache.org/thread.html/r79672c25e0ef9bb4b9148376281200a8e61c6d5ef5bb705e9a363460@%3Ccommits.unomi.apache.org%3E","http://unomi.apache.org/security/cve-2020-11975.txt"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-v6fq-q792-j46j","url":"https://osv.dev/vulnerability/GHSA-v6fq-q792-j46j"}],"summary":"Improper Input Validation in Apache Unomi"}