{"action":"Upgrade org.apache.ozone:ozone-main to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0"}],"component":"org.apache.ozone:ozone-main","cve_ids":["CVE-2021-39235"],"ecosystem":"Maven","epss":0.01551,"exploited":false,"fixed_versions":["1.2.0"],"ghsa_id":"GHSA-c6j7-4fr9-c76p","id":"tcs_01M5N8RR82AYB7383TCG5GJV06","modified_at":"2023-11-14T21:48:57Z","published_at":"2021-11-23T18:17:41Z","references":["https://osv.dev/vulnerability/GHSA-c6j7-4fr9-c76p","https://nvd.nist.gov/vuln/detail/CVE-2021-39235","https://github.com/apache/ozone","https://mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3C93f88246-4320-7423-0dac-ec7a07f47455%40apache.org%3E","http://www.openwall.com/lists/oss-security/2021/11/19/6"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-c6j7-4fr9-c76p","url":"https://osv.dev/vulnerability/GHSA-c6j7-4fr9-c76p"}],"summary":"Incorrect permissions in Apache Ozone"}