{"action":"Upgrade org.apache.storm:storm-core to 1.0.7 (1.0.x), 1.1.3 (1.1.x) or 1.2.2 (1.2.x) or later.","affected":[{"fixed":"1.1.3","introduced":"1.1.0"},{"fixed":"1.2.2","introduced":"1.2.0"},{"fixed":"1.0.7","introduced":"0"}],"component":"org.apache.storm:storm-core","cve_ids":["CVE-2018-8008"],"ecosystem":"Maven","epss":0.02247,"exploited":false,"fixed_versions":["1.1.3","1.2.2","1.0.7"],"ghsa_id":"GHSA-898j-5cc8-cmf5","id":"tcs_01M5N8MCAD35YPKQZRN2FVGS04","modified_at":"2024-03-20T17:46:21.749184Z","published_at":"2018-10-16T17:35:24Z","references":["https://osv.dev/vulnerability/GHSA-898j-5cc8-cmf5","https://nvd.nist.gov/vuln/detail/CVE-2018-8008","https://github.com/apache/storm/commit/0fc6b522487c061f89e8cdacf09f722d3f20589","https://github.com/apache/storm/commit/efad4cca2d7d461f5f8c08a0d7b51fabeb82d0a","https://github.com/apache/storm/commit/f61e5daf299d6c37c7ad65744d02556c94a16a4","https://github.com/advisories/GHSA-898j-5cc8-cmf5","https://issues.apache.org/jira/browse/STORM-3052","https://lists.apache.org/thread.html/613b2fca8bcd0a3b12c0b763ea8f7cf62e422e9f79fce6cfa5b08a58@%3Cdev.storm.apache.org%3E","http://www.securityfocus.com/bid/104418"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-898j-5cc8-cmf5","url":"https://osv.dev/vulnerability/GHSA-898j-5cc8-cmf5"}],"summary":"ZipSlip in org.apache.storm:storm-core"}