{"action":"Upgrade github.com/apache/trafficcontrol to 5.1.4 or later.","affected":[{"fixed":"6.0.1","introduced":"6.0.0"},{"fixed":"5.1.4","introduced":"5.1.0"}],"component":"github.com/apache/trafficcontrol","cve_ids":["CVE-2021-43350"],"ecosystem":"Go","epss":0.04761,"exploited":false,"fixed_versions":["6.0.1","5.1.4"],"ghsa_id":"GHSA-mg2c-rc36-p594","id":"tcs_01M5KFFTSYA8J5VQW7P7CG6AF5","modified_at":"2024-06-10T20:00:23Z","published_at":"2022-05-24T19:20:26Z","references":["https://osv.dev/vulnerability/GHSA-mg2c-rc36-p594","https://nvd.nist.gov/vuln/detail/CVE-2021-43350","https://github.com/apache/trafficcontrol","https://pkg.go.dev/vuln/GO-2024-2776","https://trafficcontrol.apache.org/security","http://www.openwall.com/lists/oss-security/2021/11/11/3","http://www.openwall.com/lists/oss-security/2021/11/11/4","http://www.openwall.com/lists/oss-security/2021/11/17/1"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mg2c-rc36-p594","url":"https://osv.dev/vulnerability/GHSA-mg2c-rc36-p594"}],"summary":"Apache Traffic Control Traffic Ops Vulnerable to LDAP Injection"}