{"action":"Upgrade org.opencms:opencms-core to 7.0.5 or later.","affected":[{"fixed":"7.0.5","introduced":"7.0.3"}],"component":"org.opencms:opencms-core","cve_ids":["CVE-2008-1301"],"ecosystem":"Maven","epss":0.02255,"exploited":false,"fixed_versions":["7.0.5"],"ghsa_id":"GHSA-xxjj-jhgc-r68f","id":"tcs_01M5N9K6WTSYTS4T2AFCMWAGY2","modified_at":"2025-06-20T16:29:49.059583Z","published_at":"2022-05-01T23:38:45Z","references":["https://osv.dev/vulnerability/GHSA-xxjj-jhgc-r68f","https://nvd.nist.gov/vuln/detail/CVE-2008-1301","https://github.com/alkacon/opencms-core/commit/7b73b5559c1b025dfe0f7b38ed4119c25b9df409","https://exchange.xforce.ibmcloud.com/vulnerabilities/41096","https://github.com/alkacon/opencms-core","http://securityreason.com/securityalert/3731"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-xxjj-jhgc-r68f","url":"https://osv.dev/vulnerability/GHSA-xxjj-jhgc-r68f"}],"summary":"Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameter"}