{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"13.0.1"}],"component":"org.opendaylight.mdsal:mdsal-artifacts","cve_ids":["CVE-2024-46942"],"ecosystem":"Maven","epss":0.00443,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hv38-h5pj-c96j","id":"tcs_01M5N91AXZQRK7A66B1RGFAV5R","modified_at":"2024-11-26T05:25:38.527377Z","published_at":"2024-09-16T14:37:28Z","references":["https://osv.dev/vulnerability/GHSA-hv38-h5pj-c96j","https://nvd.nist.gov/vuln/detail/CVE-2024-46942","https://docs.opendaylight.org/en/latest/release-notes/projects/mdsal.html","https://doi.org/10.48550/arXiv.2408.16940","https://github.com/opendaylight/mdsal","https://lf-opendaylight.atlassian.net/browse/MDSAL-869"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-hv38-h5pj-c96j","url":"https://osv.dev/vulnerability/GHSA-hv38-h5pj-c96j"}],"summary":"OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) allows follower controller to set up flow entries"}