{"action":"Upgrade org.springframework.cloud:spring-cloud-netflix-zuul to 2.2.7 or later.","affected":[{"fixed":"2.2.7","introduced":"0"}],"component":"org.springframework.cloud:spring-cloud-netflix-zuul","cve_ids":["CVE-2021-22113"],"ecosystem":"Maven","epss":0.00852,"exploited":false,"fixed_versions":["2.2.7"],"ghsa_id":"GHSA-vwpg-f6gw-rjvf","id":"tcs_01M5N9EZ71Q9WY3YG9QY7CTK4Z","modified_at":"2024-12-02T05:42:35.143690Z","published_at":"2021-05-10T15:18:50Z","references":["https://osv.dev/vulnerability/GHSA-vwpg-f6gw-rjvf","https://nvd.nist.gov/vuln/detail/CVE-2021-22113","https://github.com/spring-cloud/spring-cloud-netflix/commit/8ecb3dca511c3ce0454e42ac31ee2331d7318c07","https://tanzu.vmware.com/security/cve-2021-22113"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vwpg-f6gw-rjvf","url":"https://osv.dev/vulnerability/GHSA-vwpg-f6gw-rjvf"}],"summary":"Incorrect Authorization in Spring Cloud Netflix Zuul"}