{"action":"Upgrade org.apache.hadoop:hadoop-common to 3.4.0 or later.","affected":[{"fixed":"3.4.0","introduced":"0"}],"component":"org.apache.hadoop:hadoop-common","cve_ids":["CVE-2024-23454"],"ecosystem":"Maven","epss":0.00407,"exploited":false,"fixed_versions":["3.4.0"],"ghsa_id":"GHSA-f5fw-25gw-5m92","id":"tcs_01M5N8V2HQTGY0K69N2DN112Q5","modified_at":"2026-09-10T03:50:18.929266465Z","published_at":"2024-09-25T09:30:46Z","references":["https://osv.dev/vulnerability/GHSA-f5fw-25gw-5m92","https://nvd.nist.gov/vuln/detail/CVE-2024-23454","https://github.com/apache/hadoop/commit/8c2836402fbb2f619f1fef4ef625a8542e853a64","https://github.com/apache/hadoop","https://issues.apache.org/jira/browse/HADOOP-19031","https://lists.apache.org/thread/xlo7q8kn4tsjvx059r789oz19hzgfkfs","https://security.netapp.com/advisory/ntap-20241101-0002","http://www.openwall.com/lists/oss-security/2024/09/25/1"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"GHSA-f5fw-25gw-5m92","url":"https://osv.dev/vulnerability/GHSA-f5fw-25gw-5m92"}],"summary":"Apache Hadoop: Temporary File Local Information Disclosure"}