{"action":"Upgrade io.quarkiverse.cxf:quarkus-cxf to 3.15.2 or later.","affected":[{"fixed":"3.15.2","introduced":"0"}],"component":"io.quarkiverse.cxf:quarkus-cxf","cve_ids":["CVE-2024-9621"],"ecosystem":"Maven","epss":0.00522,"exploited":false,"fixed_versions":["3.15.2"],"ghsa_id":"GHSA-jqh2-ch7p-xwxh","id":"tcs_01M5N93FF739R8FCNXED5DCRWF","modified_at":"2024-12-06T12:49:26.051076Z","published_at":"2024-10-08T18:33:14Z","references":["https://osv.dev/vulnerability/GHSA-jqh2-ch7p-xwxh","https://nvd.nist.gov/vuln/detail/CVE-2024-9621","https://github.com/quarkiverse/quarkus-cxf/issues/1533","https://github.com/quarkiverse/quarkus-cxf/commit/8ed72cab8db8e5659e294b05529d2b45557859bd","https://access.redhat.com/errata/RHSA-2024:10035","https://access.redhat.com/security/cve/CVE-2024-9621","https://bugzilla.redhat.com/show_bug.cgi?id=2317130","https://docs.quarkiverse.io/quarkus-cxf/dev/release-notes/3.15.2.html","https://github.com/quarkiverse/quarkus-cxf"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-jqh2-ch7p-xwxh","url":"https://osv.dev/vulnerability/GHSA-jqh2-ch7p-xwxh"}],"summary":"Quarkus CXF logs passwords and other secrets"}