{"action":"Upgrade org.cloudfoundry.identity:cloudfoundry-identity-server to 3.9.8 (3.9.x) or 3.12.0 (3.12.x) or later.","affected":[{"fixed":"3.12.0","introduced":"3.10.0"},{"fixed":"3.9.8","introduced":"0"}],"component":"org.cloudfoundry.identity:cloudfoundry-identity-server","cve_ids":["CVE-2017-4960"],"ecosystem":"Maven","epss":0.01581,"exploited":false,"fixed_versions":["3.12.0","3.9.8"],"ghsa_id":"GHSA-hxgw-7539-pv7r","id":"tcs_01M5N91M8EHED9E0ZB6KSXEC2J","modified_at":"2024-12-05T05:39:42.930719Z","published_at":"2022-05-13T01:07:24Z","references":["https://osv.dev/vulnerability/GHSA-hxgw-7539-pv7r","https://nvd.nist.gov/vuln/detail/CVE-2017-4960","https://github.com/cloudfoundry/uaa/commit/17a0b86afe1fbd4ed8819267906afa3f76a8dfdc","https://github.com/cloudfoundry/uaa/commit/5eab756eaf4bb397302f00fbd0273f2470009d38","https://github.com/cloudfoundry/uaa/commit/78731f8aa37a53385d0194821a5356ab66e2138","https://github.com/cloudfoundry/uaa","https://web.archive.org/web/20200227185243/http://www.securityfocus.com/bid/96780","https://www.cloudfoundry.org/cve-2017-4960"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-hxgw-7539-pv7r","url":"https://osv.dev/vulnerability/GHSA-hxgw-7539-pv7r"}],"summary":"Cloud Foundry denial of service vulnerability"}