{"action":"Upgrade io.kroxylicious:kroxylicious-runtime to 0.8.0 or later.","affected":[{"fixed":"0.8.0","introduced":"0"}],"component":"io.kroxylicious:kroxylicious-runtime","cve_ids":["CVE-2024-8285"],"ecosystem":"Maven","epss":0.00378,"exploited":false,"fixed_versions":["0.8.0"],"ghsa_id":"GHSA-h83p-72jv-g7vp","id":"tcs_01M5N9026FDNHCT349767081AB","modified_at":"2024-11-13T19:08:09.738565Z","published_at":"2024-08-31T00:31:05Z","references":["https://osv.dev/vulnerability/GHSA-h83p-72jv-g7vp","https://nvd.nist.gov/vuln/detail/CVE-2024-8285","https://github.com/kroxylicious/kroxylicious/commit/8be1efcb0a2160fa3ad4cb0e5a27e60160774dce","https://access.redhat.com/errata/RHSA-2024:9571","https://access.redhat.com/security/cve/CVE-2024-8285","https://bugzilla.redhat.com/show_bug.cgi?id=2308606","https://github.com/kroxylicious/kroxylicious"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-h83p-72jv-g7vp","url":"https://osv.dev/vulnerability/GHSA-h83p-72jv-g7vp"}],"summary":"Missing hostname validation in Kroxylicious"}