{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"6.4.0"}],"component":"org.openapitools:openapi-generator-project","cve_ids":["CVE-2023-27162"],"ecosystem":"Maven","epss":0.00935,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wg4w-5m5r-w3p8","id":"tcs_01M5N9GATHDNXR7RRV5C15B566","modified_at":"2023-11-08T04:12:03.563955Z","published_at":"2023-03-31T21:30:38Z","references":["https://osv.dev/vulnerability/GHSA-wg4w-5m5r-w3p8","https://nvd.nist.gov/vuln/detail/CVE-2023-27162","https://gist.github.com/b33t1e/6121210ebd9efd4f693c73b830d8ab08","https://github.com/OpenAPITools/openapi-generator","https://notes.sjtu.edu.cn/s/2_yki_2Xq","http://openapi-generator.com"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-wg4w-5m5r-w3p8","url":"https://osv.dev/vulnerability/GHSA-wg4w-5m5r-w3p8"}],"summary":"OpenAPI Generator vulnerable to Server-Side Request Forgery"}