{"action":"Upgrade org.geoserver.web:gs-web-app to 2.24.4 (2.24.x) or 2.25.1 (2.25.x) or later.","affected":[{"fixed":"2.24.4","introduced":"2.10.0"},{"fixed":"2.25.1","introduced":"2.25.0"}],"component":"org.geoserver.web:gs-web-app","cve_ids":["CVE-2024-34696"],"ecosystem":"Maven","epss":0.00397,"exploited":false,"fixed_versions":["2.24.4","2.25.1"],"ghsa_id":"GHSA-j59v-vgcr-hxvf","id":"tcs_01M5N921CTJN7MR6N3S7DD0104","modified_at":"2026-09-10T03:50:16.922560117Z","published_at":"2024-07-01T19:20:57Z","references":["https://osv.dev/vulnerability/GHSA-j59v-vgcr-hxvf","https://github.com/geoserver/geoserver/security/advisories/GHSA-j59v-vgcr-hxvf","https://nvd.nist.gov/vuln/detail/CVE-2024-34696","https://github.com/geoserver/geoserver"],"severity":{"label":"medium","score":4.5},"sources":[{"source":"osv","source_id":"GHSA-j59v-vgcr-hxvf","url":"https://osv.dev/vulnerability/GHSA-j59v-vgcr-hxvf"}],"summary":"GeoServer's Server Status shows sensitive environmental variables and Java properties"}