{"action":"Upgrade org.apache.struts:struts2-rest-plugin to 2.3.34 (2.3.x) or 2.5.13 (2.5.x) or later.","affected":[{"fixed":"2.3.34","introduced":"0"},{"fixed":"2.5.13","introduced":"2.5.0"}],"component":"org.apache.struts:struts2-rest-plugin","cve_ids":["CVE-2017-9793"],"ecosystem":"Maven","epss":0.08787,"exploited":false,"fixed_versions":["2.3.34","2.5.13"],"ghsa_id":"GHSA-vwxj-6m5m-rrvh","id":"tcs_01M5N9F0HQF0KT35WKSFGJKJGE","modified_at":"2024-02-17T05:35:58.099645Z","published_at":"2018-10-16T19:37:22Z","references":["https://osv.dev/vulnerability/GHSA-vwxj-6m5m-rrvh","https://nvd.nist.gov/vuln/detail/CVE-2017-9793","https://github.com/advisories/GHSA-vwxj-6m5m-rrvh","https://security.netapp.com/advisory/ntap-20180629-0001","https://struts.apache.org/docs/s2-051.html","https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2","http://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2017-429.htm","http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html","http://www.securityfocus.com/bid/100611","http://www.securitytracker.com/id/1039262"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-vwxj-6m5m-rrvh","url":"https://osv.dev/vulnerability/GHSA-vwxj-6m5m-rrvh"}],"summary":"The REST Plugin in Apache Struts is using an outdated XStream library"}