{"action":"Upgrade org.apache.hadoop:hadoop-client to 1.0.1 (1.x) or 2.5.2 (2.x) or later.","affected":[{"fixed":"1.0.1","introduced":"0.23.0"},{"fixed":"2.5.2","introduced":"2.0.0"}],"component":"org.apache.hadoop:hadoop-client","cve_ids":["CVE-2014-3627"],"ecosystem":"Maven","epss":0.03003,"exploited":false,"fixed_versions":["1.0.1","2.5.2"],"ghsa_id":"GHSA-jpmf-8cj2-595g","id":"tcs_01M5N93CMQ791QV28MY4NG1V49","modified_at":"2024-12-07T05:28:22.082035Z","published_at":"2022-05-17T04:20:31Z","references":["https://osv.dev/vulnerability/GHSA-jpmf-8cj2-595g","https://nvd.nist.gov/vuln/detail/CVE-2014-3627","http://mail-archives.apache.org/mod_mbox/hadoop-general/201411.mbox/%3CCALwhT97dOi04aC3VbekaB+zn2UAS_OZV2EAiP78GmjnMzfp2Ug@mail.gmail.com%3E"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-jpmf-8cj2-595g","url":"https://osv.dev/vulnerability/GHSA-jpmf-8cj2-595g"}],"summary":"Improper Link Resolution Before File Access in Apache Hadoop"}