{"action":"Upgrade org.folio:mod-remote-storage to 1.7.2 (1.x) or 2.0.3 (2.x) or later.","affected":[{"fixed":"2.0.3","introduced":"2.0.0"},{"fixed":"1.7.2","introduced":"0"}],"component":"org.folio:mod-remote-storage","cve_ids":["CVE-2024-23685"],"ecosystem":"Maven","epss":0.00527,"exploited":false,"fixed_versions":["2.0.3","1.7.2"],"ghsa_id":"GHSA-m8v7-469p-5x89","id":"tcs_01M5N94QDTKC54G6ENQCTRFQ8R","modified_at":"2026-07-08T06:30:01.071623906Z","published_at":"2023-07-25T14:44:27Z","references":["https://osv.dev/vulnerability/GHSA-m8v7-469p-5x89","https://github.com/folio-org/mod-remote-storage/security/advisories/GHSA-m8v7-469p-5x89","https://nvd.nist.gov/vuln/detail/CVE-2024-23685","https://github.com/folio-org/mod-remote-storage/commit/57df495f76e9aa5be9ce7ce3a65f89b6dbcbc13b","https://github.com/folio-org/mod-remote-storage","https://vulncheck.com/advisories/vc-advisory-GHSA-m8v7-469p-5x89","https://wiki.folio.org/x/hbMMBw"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-m8v7-469p-5x89","url":"https://osv.dev/vulnerability/GHSA-m8v7-469p-5x89"}],"summary":"Hard-coded System User Credentials in Folio Data Export Spring module"}