{"action":"Upgrade org.apache.storm:storm to 0.10.0-beta1 or later.","affected":[{"fixed":"0.10.0-beta1","introduced":"0.10.0-beta"}],"component":"org.apache.storm:storm","cve_ids":["CVE-2015-3188"],"ecosystem":"Maven","epss":0.14399,"exploited":false,"fixed_versions":["0.10.0-beta1"],"ghsa_id":"GHSA-cg5h-q983-4rww","id":"tcs_01M5N8SA4E8V28ZN7GJ7TDCSPT","modified_at":"2023-11-08T03:57:53.027604Z","published_at":"2022-05-14T02:48:54Z","references":["https://osv.dev/vulnerability/GHSA-cg5h-q983-4rww","https://nvd.nist.gov/vuln/detail/CVE-2015-3188","https://github.com/apache/storm/blob/v0.10.0-beta1/SECURITY.md","https://github.com/apache/storm/blob/v0.10.0-beta1/STORM-UI-REST-API.md","https://web.archive.org/web/20151014213052/http://www.securitytracker.com/id/1032695","https://web.archive.org/web/20171202122914/http://www.securityfocus.com/archive/1/535804/100/0/threaded","http://packetstormsecurity.com/files/132417/Apache-Storm-0.10.0-beta-Code-Execution.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-cg5h-q983-4rww","url":"https://osv.dev/vulnerability/GHSA-cg5h-q983-4rww"}],"summary":"Apache Storm remote code execution vulnerability"}