{"action":"Upgrade org.geoserver:gs-platform to 2.23.4 (2.23.x) or 2.24.1 (2.24.x) or later.","affected":[{"fixed":"2.23.4","introduced":"0"},{"fixed":"2.24.1","introduced":"2.24.0"}],"component":"org.geoserver:gs-platform","cve_ids":["CVE-2023-51444"],"ecosystem":"Maven","epss":0.01867,"exploited":false,"fixed_versions":["2.23.4","2.24.1"],"ghsa_id":"GHSA-9v5q-2gwq-q9hq","id":"tcs_01M5N8QQ4H1FD3J8SRJS276602","modified_at":"2024-03-20T15:43:58Z","published_at":"2024-03-20T14:54:59Z","references":["https://osv.dev/vulnerability/GHSA-9v5q-2gwq-q9hq","https://github.com/geoserver/geoserver/security/advisories/GHSA-9v5q-2gwq-q9hq","https://nvd.nist.gov/vuln/detail/CVE-2023-51444","https://github.com/geoserver/geoserver/pull/7222","https://github.com/geoserver/geoserver/commit/ca683170c669718cb6ad4c79e01b0451065e13b8","https://github.com/geoserver/geoserver/commit/fe235b3bb1d7f05751a4a2ef5390c36f5c9e78ae","https://github.com/geoserver/geoserver","https://osgeo-org.atlassian.net/browse/GEOS-11176"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-9v5q-2gwq-q9hq","url":"https://osv.dev/vulnerability/GHSA-9v5q-2gwq-q9hq"}],"summary":"Arbitrary file upload vulnerability in GeoServer's REST Coverage Store API"}