{"action":"Upgrade org.apache.geode:geode-core to 1.12.5 (1.12.x) or 1.13.5 (1.13.x) or later.","affected":[{"fixed":"1.12.5","introduced":"0"},{"fixed":"1.13.5","introduced":"1.13.0"}],"component":"org.apache.geode:geode-core","cve_ids":["CVE-2021-34797"],"ecosystem":"Maven","epss":0.02514,"exploited":false,"fixed_versions":["1.12.5","1.13.5"],"ghsa_id":"GHSA-mw25-f5r2-hpc6","id":"tcs_01M5N95WG7BYMS9AAWCE1CCQP9","modified_at":"2024-12-04T05:33:25.245716Z","published_at":"2022-01-06T22:23:25Z","references":["https://osv.dev/vulnerability/GHSA-mw25-f5r2-hpc6","https://nvd.nist.gov/vuln/detail/CVE-2021-34797","https://github.com/apache/geode","https://lists.apache.org/thread/nq2w9gjzm1cjx1rh6zw41ty39qw7qpx4","https://lists.apache.org/thread/p4l0g49rzzzpn8yt9q9p0xp52h3zmsmk"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-mw25-f5r2-hpc6","url":"https://osv.dev/vulnerability/GHSA-mw25-f5r2-hpc6"}],"summary":"Insertion of Sensitive Information into Log File in Apache Geode"}