{"action":"Upgrade org.apache.sling:org.apache.sling.servlets.resolver to 2.11.0 or later.","affected":[{"fixed":"2.11.0","introduced":"0"}],"component":"org.apache.sling:org.apache.sling.servlets.resolver","cve_ids":["CVE-2024-23673"],"ecosystem":"Maven","epss":0.01321,"exploited":false,"fixed_versions":["2.11.0"],"ghsa_id":"GHSA-h2rq-qhr7-53gm","id":"tcs_01M5N8ZE82RH80Z9RHPJR7MZVK","modified_at":"2025-02-13T19:37:05.581192Z","published_at":"2024-02-06T12:30:30Z","references":["https://osv.dev/vulnerability/GHSA-h2rq-qhr7-53gm","https://nvd.nist.gov/vuln/detail/CVE-2024-23673","https://github.com/apache/sling-org-apache-sling-servlets-resolver/commit/b54d4e6693e0bcd63a97a0328f4f065b8a81b75e","https://github.com/apache/sling-org-apache-sling-servlets-resolver","https://lists.apache.org/thread/5zzx8ztwc6tmbwlw80m2pbrp3913l2kl","http://www.openwall.com/lists/oss-security/2024/02/06/1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-h2rq-qhr7-53gm","url":"https://osv.dev/vulnerability/GHSA-h2rq-qhr7-53gm"}],"summary":"Apache Sling Servlets Resolver executes malicious code via path traversal"}