{"action":"Upgrade org.geoserver:gs-restconfig to 2.23.5 (2.23.x) or 2.24.2 (2.24.x) or later.","affected":[{"fixed":"2.23.5","introduced":"0"},{"fixed":"2.24.2","introduced":"2.24.0"}],"component":"org.geoserver:gs-restconfig","cve_ids":["CVE-2024-23634"],"ecosystem":"Maven","epss":0.00694,"exploited":false,"fixed_versions":["2.23.5","2.24.2"],"ghsa_id":"GHSA-75m5-hh4r-q9gx","id":"tcs_01M5N8HGPY1MDD8TKNVMEYGBHC","modified_at":"2026-09-10T03:50:10.253198954Z","published_at":"2024-03-20T15:01:48Z","references":["https://osv.dev/vulnerability/GHSA-75m5-hh4r-q9gx","https://github.com/geoserver/geoserver/security/advisories/GHSA-75m5-hh4r-q9gx","https://nvd.nist.gov/vuln/detail/CVE-2024-23634","https://github.com/geoserver/geoserver/pull/7289","https://github.com/geoserver/geoserver/commit/5d6af2f8ba9ad7dffae59575504a867159698772","https://github.com/geoserver/geoserver/commit/c37f58fbacdfa0d581a6f99195585f70b1201f0a","https://github.com/geoserver/geoserver","https://osgeo-org.atlassian.net/browse/GEOS-11213"],"severity":{"label":"medium","score":6},"sources":[{"source":"osv","source_id":"GHSA-75m5-hh4r-q9gx","url":"https://osv.dev/vulnerability/GHSA-75m5-hh4r-q9gx"}],"summary":"GeoServer Arbitrary file renaming vulnerability in REST Coverage/Data Store API"}