{"action":"Upgrade org.apache.struts:struts2-core to 2.5.30 or later.","affected":[{"fixed":"2.5.30","introduced":"2.0.0"}],"component":"org.apache.struts:struts2-core","cve_ids":["CVE-2021-31805"],"ecosystem":"Maven","epss":0.85433,"exploited":false,"fixed_versions":["2.5.30"],"ghsa_id":"GHSA-v8j6-6c2r-r27c","id":"tcs_01M5N9DNV3R3ZGQST875TFQHJ9","modified_at":"2024-02-20T05:22:46.454990Z","published_at":"2022-04-13T00:00:30Z","references":["https://osv.dev/vulnerability/GHSA-v8j6-6c2r-r27c","https://nvd.nist.gov/vuln/detail/CVE-2021-31805","https://cwiki.apache.org/confluence/display/WW/S2-062","https://security.netapp.com/advisory/ntap-20220420-0001","https://www.oracle.com/security-alerts/cpujul2022.html","http://www.openwall.com/lists/oss-security/2022/04/12/6"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-v8j6-6c2r-r27c","url":"https://osv.dev/vulnerability/GHSA-v8j6-6c2r-r27c"}],"summary":"Expression Language Injection in Apache Struts"}