{"action":"Upgrade org.apache.sshd:sshd-sftp to 2.9.3 or later.","affected":[{"fixed":"2.9.3","introduced":"1.0.0"}],"component":"org.apache.sshd:sshd-sftp","cve_ids":["CVE-2023-35887"],"ecosystem":"Maven","epss":0.01311,"exploited":false,"fixed_versions":["2.9.3"],"ghsa_id":"GHSA-mjmq-gwgm-5qhm","id":"tcs_01M5N95AM45WFC56K5H3GPSSNE","modified_at":"2026-09-10T03:50:02.653103986Z","published_at":"2023-07-10T18:30:49Z","references":["https://osv.dev/vulnerability/GHSA-mjmq-gwgm-5qhm","https://nvd.nist.gov/vuln/detail/CVE-2023-35887","https://github.com/apache/mina-sshd/pull/362","https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0","https://github.com/apache/mina-sshd/commit/a61e93035f06bff8fc622ad94870fb773d48b9f0","https://github.com/apache/mina-sshd/commit/c20739b43aab0f7bf2ccad982a6cb37b9d5a8a0b","https://github.com/apache/mina-sshd","https://issues.apache.org/jira/browse/SSHD-1324","https://lists.apache.org/thread/b9qgtqvhnvgfpn0w1gz918p21p53tqk2"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"GHSA-mjmq-gwgm-5qhm#Maven/org.apache.sshd:sshd-sftp","url":"https://osv.dev/vulnerability/GHSA-mjmq-gwgm-5qhm"}],"summary":"Apache MINA SSHD information disclosure vulnerability"}