{"action":"Upgrade org.apache.unomi:unomi to 1.5.2 or later.","affected":[{"fixed":"1.5.2","introduced":"0"}],"component":"org.apache.unomi:unomi","cve_ids":["CVE-2020-13942"],"ecosystem":"Maven","epss":0.68296,"exploited":false,"fixed_versions":["1.5.2"],"ghsa_id":"GHSA-xp5j-wj4h-2jq9","id":"tcs_01M5N9JPB4Y3VBQRZ87TF04M0W","modified_at":"2023-11-08T04:02:23.451746Z","published_at":"2022-02-10T00:30:54Z","references":["https://osv.dev/vulnerability/GHSA-xp5j-wj4h-2jq9","https://nvd.nist.gov/vuln/detail/CVE-2020-13942","https://advisory.checkmarx.net/advisory/CX-2020-4284","https://lists.apache.org/thread.html/r08a4057ff7196b8880117edaa4b6207cbd36ed692d8dd1f5a56b4d0f@%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/r4a8fa91836687eaca42b5420a778ca8c8fd3a3740e4cf4401acc9118@%3Cdev.unomi.apache.org%3E","https://lists.apache.org/thread.html/r4a8fa91836687eaca42b5420a778ca8c8fd3a3740e4cf4401acc9118@%3Cusers.unomi.apache.org%3E","https://lists.apache.org/thread.html/r79672c25e0ef9bb4b9148376281200a8e61c6d5ef5bb705e9a363460@%3Ccommits.unomi.apache.org%3E","https://lists.apache.org/thread.html/rcb6d2eafcf15def433aaddfa06738e5faa5060cef2647769e178999a@%3Cdev.unomi.apache.org%3E","https://lists.apache.org/thread.html/rcb6d2eafcf15def433aaddfa06738e5faa5060cef2647769e178999a@%3Cusers.unomi.apache.org%3E","http://unomi.apache.org./security/cve-2020-13942.txt","http://www.openwall.com/lists/oss-security/2020/11/24/5"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xp5j-wj4h-2jq9","url":"https://osv.dev/vulnerability/GHSA-xp5j-wj4h-2jq9"}],"summary":"Injection and Improper Input Validation in Apache Unomi"}