{"action":"Upgrade org.hibernate:hibernate-validator to 5.2.5.Final (5.2.x), 5.3.6.Final (5.3.x) or 5.4.2.Final (5.4.x) or later.","affected":[{"fixed":"5.2.5.Final","introduced":"5.2.0"},{"fixed":"5.3.6.Final","introduced":"5.3.0"},{"fixed":"5.4.2.Final","introduced":"5.4.0"}],"component":"org.hibernate:hibernate-validator","cve_ids":["CVE-2017-7536"],"ecosystem":"Maven","epss":0.00482,"exploited":false,"fixed_versions":["5.2.5.Final","5.3.6.Final","5.4.2.Final"],"ghsa_id":"GHSA-xxgp-pcfc-3vgc","id":"tcs_01M5N9K6F822YZ6NZPR6D6XF4R","modified_at":"2024-03-08T05:18:32.633931Z","published_at":"2020-06-15T19:57:48Z","references":["https://osv.dev/vulnerability/GHSA-xxgp-pcfc-3vgc","https://nvd.nist.gov/vuln/detail/CVE-2017-7536","https://github.com/hibernate/hibernate-validator/commit/0886e89900d343ea20fde5137c9a3086e6da9ac","https://github.com/hibernate/hibernate-validator/commit/0778a5c98b817771a645c6f4ba0b28dd8b5437b","https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe@%3Ccommits.druid.apache.org%3E","https://github.com/hibernate/hibernate-validator","https://bugzilla.redhat.com/show_bug.cgi?id=1465573","https://access.redhat.com/errata/RHSA-2018:3817","https://access.redhat.com/errata/RHSA-2018:2927","https://access.redhat.com/errata/RHSA-2018:2743","https://access.redhat.com/errata/RHSA-2018:2742","https://access.redhat.com/errata/RHSA-2018:2741","https://access.redhat.com/errata/RHSA-2018:2740","https://access.redhat.com/errata/RHSA-2017:3458","https://access.redhat.com/errata/RHSA-2017:3456","https://access.redhat.com/errata/RHSA-2017:3455","https://access.redhat.com/errata/RHSA-2017:3454","https://access.redhat.com/errata/RHSA-2017:3141","https://access.redhat.com/errata/RHSA-2017:2811","https://access.redhat.com/errata/RHSA-2017:2810","https://access.redhat.com/errata/RHSA-2017:2809","https://access.redhat.com/errata/RHSA-2017:2808","http://www.securityfocus.com/bid/101048","http://www.securitytracker.com/id/1039744"],"severity":{"label":"high","score":7},"sources":[{"source":"osv","source_id":"GHSA-xxgp-pcfc-3vgc","url":"https://osv.dev/vulnerability/GHSA-xxgp-pcfc-3vgc"}],"summary":"Privilege Escalation in Hibernate Validator"}