{"action":"Upgrade org.graylog2:graylog2-server to 5.0.9 (5.0.x) or 5.1.3 (5.1.x) or later.","affected":[{"fixed":"5.1.3","introduced":"5.1.0"},{"fixed":"5.0.9","introduced":"0"}],"component":"org.graylog2:graylog2-server","cve_ids":["CVE-2023-41045"],"ecosystem":"Maven","epss":0.00358,"exploited":false,"fixed_versions":["5.1.3","5.0.9"],"ghsa_id":"GHSA-g96c-x7rh-99r3","id":"tcs_01M5N8XVX7J6057WCXQDGSGQ81","modified_at":"2024-02-16T08:05:54.421677Z","published_at":"2023-07-06T20:51:48Z","references":["https://osv.dev/vulnerability/GHSA-g96c-x7rh-99r3","https://github.com/Graylog2/graylog2-server/security/advisories/GHSA-g96c-x7rh-99r3","https://nvd.nist.gov/vuln/detail/CVE-2023-41045","https://github.com/Graylog2/graylog2-server/commit/466af814523cffae9fbc7e77bab7472988f03c3e","https://github.com/Graylog2/graylog2-server/commit/a101f4f12180fd3dfa7d3345188a099877a3c327","https://github.com/Graylog2/graylog2-server"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-g96c-x7rh-99r3","url":"https://osv.dev/vulnerability/GHSA-g96c-x7rh-99r3"}],"summary":"Graylog vulnerable to insecure source port usage for DNS queries"}