{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"2.0.600","last_affected":"2.4.0"}],"component":"org.eclipse.kura:org.eclipse.kura.web2","cve_ids":["CVE-2024-3046"],"ecosystem":"Maven","epss":0.00576,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-frc2-w2cc-x794","id":"tcs_01M5N8WMN34DQMR612FKXW4J79","modified_at":"2024-04-15T20:19:17Z","published_at":"2024-04-09T12:30:47Z","references":["https://osv.dev/vulnerability/GHSA-frc2-w2cc-x794","https://nvd.nist.gov/vuln/detail/CVE-2024-3046","https://github.com/eclipse/kura","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/188"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-frc2-w2cc-x794","url":"https://osv.dev/vulnerability/GHSA-frc2-w2cc-x794"}],"summary":"Eclipse Kura LogServlet vulnerability"}