{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.9.0.1"}],"component":"org.apache.storm:storm","cve_ids":["CVE-2014-0115"],"ecosystem":"Maven","epss":0.0525,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cpp8-r8pr-wv4v","id":"tcs_01M5N8SYQZCHVVBSYD32YH1CTD","modified_at":"2023-11-08T03:57:31.871812Z","published_at":"2022-05-17T00:24:06Z","references":["https://osv.dev/vulnerability/GHSA-cpp8-r8pr-wv4v","https://nvd.nist.gov/vuln/detail/CVE-2014-0115","https://issues.apache.org/jira/browse/STORM-269","https://mail-archives.apache.org/mod_mbox/storm-dev/201404.mbox/%3CJIRA.12704141.1395964296891.201561.1398799995645@arcas%3E"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cpp8-r8pr-wv4v","url":"https://osv.dev/vulnerability/GHSA-cpp8-r8pr-wv4v"}],"summary":"Apache Storm log viewer path traversal vulnerability"}