{"action":"Upgrade net.opentsdb:opentsdb to 2.4.2 or later.","affected":[{"fixed":"2.4.2","introduced":"0"}],"component":"net.opentsdb:opentsdb","cve_ids":["CVE-2023-36812"],"ecosystem":"Maven","epss":0.16501,"exploited":false,"fixed_versions":["2.4.2"],"ghsa_id":"GHSA-76f7-9v52-v2fw","id":"tcs_01M5N8HKSP44JW3RHNQCGDEP9T","modified_at":"2026-09-10T03:50:02.124887809Z","published_at":"2023-06-30T22:58:41Z","references":["https://osv.dev/vulnerability/GHSA-76f7-9v52-v2fw","https://github.com/OpenTSDB/opentsdb/security/advisories/GHSA-76f7-9v52-v2fw","https://nvd.nist.gov/vuln/detail/CVE-2023-36812","https://github.com/OpenTSDB/opentsdb/commit/07c4641471c6f5c2ab5aab615969e97211eb50d9","https://github.com/OpenTSDB/opentsdb/commit/fa88d3e4b5369f9fb73da384fab0b23e246309ba","https://github.com/OpenTSDB/opentsdb","http://packetstormsecurity.com/files/174570/OpenTSDB-2.4.1-Unauthenticated-Command-Injection.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-76f7-9v52-v2fw","url":"https://osv.dev/vulnerability/GHSA-76f7-9v52-v2fw"}],"summary":"Remote Code Execution for 2.4.1 and earlier"}