{"action":"Upgrade org.apache.streampark:streampark to 2.1.4 or later.","affected":[{"fixed":"2.1.4","introduced":"0"}],"component":"org.apache.streampark:streampark","cve_ids":["CVE-2023-52291"],"ecosystem":"Maven","epss":0.01607,"exploited":false,"fixed_versions":["2.1.4"],"ghsa_id":"GHSA-7g94-hfqc-q993","id":"tcs_01M5N8JBPXSFYQ96ZBJR2RY5AH","modified_at":"2025-02-13T20:27:05.108476Z","published_at":"2024-07-17T09:30:49Z","references":["https://osv.dev/vulnerability/GHSA-7g94-hfqc-q993","https://nvd.nist.gov/vuln/detail/CVE-2023-52291","https://github.com/apache/streampark","https://lists.apache.org/thread/pl6xgzoqrl4kcn0nt55zjbsx8dn80mkf","http://www.openwall.com/lists/oss-security/2024/07/17/1"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-7g94-hfqc-q993","url":"https://osv.dev/vulnerability/GHSA-7g94-hfqc-q993"}],"summary":"Apache StreamPark: Unchecked maven build params could trigger remote command execution"}