{"action":"Upgrade org.apache.activemq:activemq-parent to 5.15.13 or later.","affected":[{"fixed":"5.15.13","introduced":"5.15.12"}],"component":"org.apache.activemq:activemq-parent","cve_ids":["CVE-2020-11998"],"ecosystem":"Maven","epss":0.48885,"exploited":false,"fixed_versions":["5.15.13"],"ghsa_id":"GHSA-wqfh-9m4g-7x6x","id":"tcs_01M5N9GZK7Y5SGXHHZQEKZG3A5","modified_at":"2024-03-14T21:56:27Z","published_at":"2022-02-09T22:14:58Z","references":["https://osv.dev/vulnerability/GHSA-wqfh-9m4g-7x6x","https://nvd.nist.gov/vuln/detail/CVE-2020-11998","https://github.com/apache/activemq/commit/0d6e5f2","https://github.com/apache/activemq/commit/88b78d0","https://github.com/apache/activemq/commit/aa8900c","https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7@%3Ccommits.activemq.apache.org%3E","https://lists.apache.org/thread.html/rb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d@%3Ccommits.activemq.apache.org%3E","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","http://activemq.apache.org/security-advisories.data/CVE-2020-11998-announcement.txt"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-wqfh-9m4g-7x6x","url":"https://osv.dev/vulnerability/GHSA-wqfh-9m4g-7x6x"}],"summary":"Remote code execution in Apache ActiveMQ"}