{"action":"Upgrade org.bonitasoft.connectors:bonita-connector-webservice to 1.3.1 or later.","affected":[{"fixed":"1.3.1","introduced":"0"}],"component":"org.bonitasoft.connectors:bonita-connector-webservice","cve_ids":["CVE-2020-36640"],"ecosystem":"Maven","epss":0.00836,"exploited":false,"fixed_versions":["1.3.1"],"ghsa_id":"GHSA-wg99-5vrx-j2gg","id":"tcs_01M5N9GD1WNSY8H81RPVA425Y0","modified_at":"2023-11-08T04:03:48.713964Z","published_at":"2023-01-05T12:30:28Z","references":["https://osv.dev/vulnerability/GHSA-wg99-5vrx-j2gg","https://nvd.nist.gov/vuln/detail/CVE-2020-36640","https://github.com/bonitasoft/bonita-connector-webservice/pull/17","https://github.com/bonitasoft/bonita-connector-webservice/commit/a12ad691c05af19e9061d7949b6b828ce48815d5","https://github.com/bonitasoft/bonita-connector-webservice","https://github.com/bonitasoft/bonita-connector-webservice/releases/tag/1.3.1","https://vuldb.com/?ctiid.217443","https://vuldb.com/?id.217443"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-wg99-5vrx-j2gg","url":"https://osv.dev/vulnerability/GHSA-wg99-5vrx-j2gg"}],"summary":"bonita-connector-webservice XML External Entity vulnerability"}