{"action":"Upgrade org.apache.cxf:cxf-core to 3.4.10 (3.4.x) or 3.5.5 (3.5.x) or later.","affected":[{"fixed":"3.4.10","introduced":"0"},{"fixed":"3.5.5","introduced":"3.5.0"}],"component":"org.apache.cxf:cxf-core","cve_ids":["CVE-2022-46364"],"ecosystem":"Maven","epss":0.02315,"exploited":false,"fixed_versions":["3.4.10","3.5.5"],"ghsa_id":"GHSA-x3x3-qwjq-8gj4","id":"tcs_01M5N9HP19RCM4HTFFGB7CKM89","modified_at":"2023-11-08T04:10:56.313603Z","published_at":"2022-12-13T18:30:26Z","references":["https://osv.dev/vulnerability/GHSA-x3x3-qwjq-8gj4","https://nvd.nist.gov/vuln/detail/CVE-2022-46364","https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1&modificationDate=1670944472739&api=v2"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-x3x3-qwjq-8gj4","url":"https://osv.dev/vulnerability/GHSA-x3x3-qwjq-8gj4"}],"summary":"Apache CXF Server-Side Request Forgery vulnerability"}