{"action":"Upgrade org.apache.lucene:lucene-replicator to 9.12.0 or later.","affected":[{"fixed":"9.12.0","introduced":"4.4.0"}],"component":"org.apache.lucene:lucene-replicator","cve_ids":["CVE-2024-45772"],"ecosystem":"Maven","epss":0.00582,"exploited":false,"fixed_versions":["9.12.0"],"ghsa_id":"GHSA-g643-xq6w-r67c","id":"tcs_01M5N8XGQSFEH248H5VE05J9RW","modified_at":"2024-12-12T19:43:50.696648Z","published_at":"2024-09-30T09:30:47Z","references":["https://osv.dev/vulnerability/GHSA-g643-xq6w-r67c","https://nvd.nist.gov/vuln/detail/CVE-2024-45772","https://gitbox.apache.org/repos/asf?p=lucene.git","https://lists.apache.org/thread/3f3oph7bqnqspb9q5p0gm5mgc1b6thjo","http://www.openwall.com/lists/oss-security/2024/09/29/1"],"severity":{"label":"medium","score":5.1},"sources":[{"source":"osv","source_id":"GHSA-g643-xq6w-r67c","url":"https://osv.dev/vulnerability/GHSA-g643-xq6w-r67c"}],"summary":"Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator."}