{"action":"Upgrade org.sakaiproject.kernel:sakai-kernel-impl to 23.3 or later.","affected":[{"fixed":"23.3","introduced":"23.0"}],"component":"org.sakaiproject.kernel:sakai-kernel-impl","cve_ids":["CVE-2024-47876"],"ecosystem":"Maven","epss":0.0057,"exploited":false,"fixed_versions":["23.3"],"ghsa_id":"GHSA-cx95-q6gx-w4qp","id":"tcs_01M5N8TM5J5AHBZBAW17ZS23BM","modified_at":"2024-10-15T20:01:37.158891Z","published_at":"2024-10-15T14:04:27Z","references":["https://osv.dev/vulnerability/GHSA-cx95-q6gx-w4qp","https://github.com/sakaiproject/sakai/security/advisories/GHSA-cx95-q6gx-w4qp","https://nvd.nist.gov/vuln/detail/CVE-2024-47876","https://github.com/sakaiproject/sakai/commit/a9aadd9347cfb204515e89ac0163e1be9e56cc41","https://central.sonatype.com/artifact/org.sakaiproject.kernel/sakai-kernel-impl","https://github.com/sakaiproject/sakai","https://sakaiproject.atlassian.net/browse/SAK-50571"],"severity":{"label":"unknown","score":0},"sources":[{"source":"osv","source_id":"GHSA-cx95-q6gx-w4qp","url":"https://osv.dev/vulnerability/GHSA-cx95-q6gx-w4qp"}],"summary":"SAK-50571 Sakai Kernel users created with type roleview can login as a normal user"}