{"action":"Upgrade io.gravitee.apim:gravitee-api-management to 3.15.13 or later.","affected":[{"fixed":"3.15.13","introduced":"0"}],"component":"io.gravitee.apim:gravitee-api-management","cve_ids":["CVE-2022-38723"],"ecosystem":"Maven","epss":0.0078,"exploited":false,"fixed_versions":["3.15.13"],"ghsa_id":"GHSA-vp62-m958-qj8c","id":"tcs_01M5N9EEKP7M941WAXRWDR8J4Y","modified_at":"2023-11-08T04:10:13.095157Z","published_at":"2023-01-04T00:30:26Z","references":["https://osv.dev/vulnerability/GHSA-vp62-m958-qj8c","https://nvd.nist.gov/vuln/detail/CVE-2022-38723","https://community.gravitee.io/t/whats-new-in-access-management-3-15-lts/164","https://gist.github.com/garatc/d86cdb1fa2e35a7ee719d9a0de0b5ca3","https://github.com/advisories/GHSA-xc4w-28g8-vqm5","https://github.com/gravitee-io/gravitee-api-management"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-vp62-m958-qj8c","url":"https://osv.dev/vulnerability/GHSA-vp62-m958-qj8c"}],"summary":"Gravitee API Management contains Path Traversal"}