{"action":"Upgrade org.apache.flume.flume-ng-sources:flume-jms-source to 1.10.1 or later.","affected":[{"fixed":"1.10.1","introduced":"1.4.0"}],"component":"org.apache.flume.flume-ng-sources:flume-jms-source","cve_ids":["CVE-2022-34916"],"ecosystem":"Maven","epss":0.03028,"exploited":false,"fixed_versions":["1.10.1"],"ghsa_id":"GHSA-h9mh-mgpv-gqmv","id":"tcs_01M5N907F9SDHWPFGDDYQSRHEZ","modified_at":"2023-11-08T04:09:49.499381Z","published_at":"2022-08-22T00:00:48Z","references":["https://osv.dev/vulnerability/GHSA-h9mh-mgpv-gqmv","https://nvd.nist.gov/vuln/detail/CVE-2022-34916","https://github.com/apache/flume/commit/7fe9af49c485756e1b618493a5bc00b70d7fbd2d","https://github.com/apache/flume","https://issues.apache.org/jira/browse/FLUME-3428","https://lists.apache.org/thread/qkmt4r2t9tbrxrdbjg1m2oczbvczd9zn"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-h9mh-mgpv-gqmv","url":"https://osv.dev/vulnerability/GHSA-h9mh-mgpv-gqmv"}],"summary":"Remote code execution in Apache Flume"}