{"action":"Upgrade org.openidentityplatform.opendj:opendj-server-legacy to 4.9.3 or later.","affected":[{"fixed":"4.9.3","introduced":"0"}],"component":"org.openidentityplatform.opendj:opendj-server-legacy","cve_ids":["CVE-2025-27497"],"ecosystem":"Maven","epss":0.00389,"exploited":false,"fixed_versions":["4.9.3"],"ghsa_id":"GHSA-93qr-h8pr-4593","id":"tcs_01M5N8P16C3M8XB01MC2RFD4V0","modified_at":"2025-03-05T18:42:10.105936Z","published_at":"2025-03-05T18:33:30Z","references":["https://osv.dev/vulnerability/GHSA-93qr-h8pr-4593","https://github.com/OpenIdentityPlatform/OpenDJ/security/advisories/GHSA-93qr-h8pr-4593","https://nvd.nist.gov/vuln/detail/CVE-2025-27497","https://github.com/OpenIdentityPlatform/OpenDJ/commit/08aee4724608e4a32baa3c7d7499ec913a275aaf","https://github.com/OpenIdentityPlatform/OpenDJ"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-93qr-h8pr-4593","url":"https://osv.dev/vulnerability/GHSA-93qr-h8pr-4593"},{"source":"nvd","source_id":"CVE-2025-27497","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27497"}],"summary":"OpenDJ Denial of Service (DoS) using alias loop"}