{"action":"Upgrade org.apache.ozone:ozone-main to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0"}],"component":"org.apache.ozone:ozone-main","cve_ids":["CVE-2021-39234"],"ecosystem":"Maven","epss":0.01412,"exploited":false,"fixed_versions":["1.2.0"],"ghsa_id":"GHSA-c8cw-2c5j-xff3","id":"tcs_01M5N8RY91RK5WQXX0XTVAAZXF","modified_at":"2023-11-08T04:06:34.717870Z","published_at":"2021-11-23T17:56:30Z","references":["https://osv.dev/vulnerability/GHSA-c8cw-2c5j-xff3","https://nvd.nist.gov/vuln/detail/CVE-2021-39234","https://mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3C97d65498-7f8c-366f-1bea-5a74b6378f0d%40apache.org%3E","http://www.openwall.com/lists/oss-security/2021/11/19/5"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-c8cw-2c5j-xff3","url":"https://osv.dev/vulnerability/GHSA-c8cw-2c5j-xff3"}],"summary":"Incorrect Authorization in Apache Ozone"}