{"action":"Upgrade org.apache.streampipes:streampipes-parent to 0.95.0 or later.","affected":[{"fixed":"0.95.0","introduced":"0"}],"component":"org.apache.streampipes:streampipes-parent","cve_ids":["CVE-2024-31411"],"ecosystem":"Maven","epss":0.01106,"exploited":false,"fixed_versions":["0.95.0"],"ghsa_id":"GHSA-6523-jf4r-c962","id":"tcs_01M5N8ETWNZRR0Y5F0E8SA8Q4V","modified_at":"2025-01-21T18:36:30.031336Z","published_at":"2024-07-17T12:31:11Z","references":["https://osv.dev/vulnerability/GHSA-6523-jf4r-c962","https://nvd.nist.gov/vuln/detail/CVE-2024-31411","https://github.com/apache/streampipes","https://github.com/apache/streampipes/releases/tag/release%2F0.95.0","https://github.com/pypa/advisory-database/tree/main/vulns/streampipes/PYSEC-2024-173.yaml","https://lists.apache.org/thread/b0657okbwzg5xxs11hphvc9qrd9s70mt","http://www.openwall.com/lists/oss-security/2024/07/16/10"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-6523-jf4r-c962#Maven/org.apache.streampipes:streampipes-parent","url":"https://osv.dev/vulnerability/GHSA-6523-jf4r-c962"}],"summary":"Apache StreamPipes has potential remote code execution (RCE) via file upload"}