{"action":"Upgrade org.lucee:lucee to the fixed version for your line (see fixed_versions).","affected":[{"fixed":"5.3.12.1","introduced":"5.3.10.79-RC"},{"fixed":"5.4.3.2","introduced":"5.4.0.65-RC"},{"introduced":"0","last_affected":"5.3.7.59"},{"fixed":"5.3.8.236","introduced":"5.3.8.132-RC"},{"fixed":"5.3.9.173","introduced":"5.3.9.113"}],"component":"org.lucee:lucee","cve_ids":["CVE-2023-38693"],"ecosystem":"Maven","epss":0.00823,"exploited":false,"fixed_versions":["5.3.12.1","5.4.3.2","5.3.8.236","5.3.9.173"],"ghsa_id":"GHSA-vwjx-mmwm-pwrf","id":"tcs_01M5N9EZ20S8S7168MSW7T4MKJ","modified_at":"2025-03-05T19:44:47.856360Z","published_at":"2025-03-05T18:31:03Z","references":["https://osv.dev/vulnerability/GHSA-vwjx-mmwm-pwrf","https://github.com/lucee/Lucee/security/advisories/GHSA-vwjx-mmwm-pwrf","https://nvd.nist.gov/vuln/detail/CVE-2023-38693","https://github.com/lucee/Lucee"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-vwjx-mmwm-pwrf","url":"https://osv.dev/vulnerability/GHSA-vwjx-mmwm-pwrf"}],"summary":"Lucee RCE/XXE Vulnerability"}