{"action":"Upgrade org.jberet:jberet-core to 2.2.1.Final or later.","affected":[{"fixed":"2.2.1.Final","introduced":"0"}],"component":"org.jberet:jberet-core","cve_ids":["CVE-2024-1102"],"ecosystem":"Maven","epss":0.00808,"exploited":false,"fixed_versions":["2.2.1.Final"],"ghsa_id":"GHSA-9wmf-xf3h-r8pr","id":"tcs_01M5N8QYNB7GQ1D9TSMYJX8XGC","modified_at":"2025-10-24T19:53:42.149919Z","published_at":"2024-04-25T18:30:39Z","references":["https://osv.dev/vulnerability/GHSA-9wmf-xf3h-r8pr","https://nvd.nist.gov/vuln/detail/CVE-2024-1102","https://github.com/jberet/jsr352/issues/452","https://github.com/jberet/jsr352/commit/eeef999663d7da0e372aeeeac26ecf7201a3121d","https://access.redhat.com/errata/RHSA-2024:1677","https://access.redhat.com/errata/RHSA-2024:3580","https://access.redhat.com/errata/RHSA-2024:3581","https://access.redhat.com/errata/RHSA-2024:3583","https://access.redhat.com/security/cve/CVE-2024-1102","https://bugzilla.redhat.com/show_bug.cgi?id=2262060","https://github.com/jberet/jsr352"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-9wmf-xf3h-r8pr","url":"https://osv.dev/vulnerability/GHSA-9wmf-xf3h-r8pr"}],"summary":"Jberet: jberet-core logging database credentials"}