{"action":"Upgrade org.apache.inlong:manager-common to 1.11.0 or later.","affected":[{"fixed":"1.11.0","introduced":"1.8.0"}],"component":"org.apache.inlong:manager-common","cve_ids":["CVE-2024-26580"],"ecosystem":"Maven","epss":0.0122,"exploited":false,"fixed_versions":["1.11.0"],"ghsa_id":"GHSA-p2gx-4434-pf6g","id":"tcs_01M5N966S3Y1TCKR54TY4QMYWJ","modified_at":"2024-08-02T14:17:55.188907Z","published_at":"2024-03-06T12:30:29Z","references":["https://osv.dev/vulnerability/GHSA-p2gx-4434-pf6g","https://nvd.nist.gov/vuln/detail/CVE-2024-26580","https://github.com/apache/inlong/pull/9673","https://github.com/apache/inlong/commit/1b63af3e1f208602f60b5ce19af7413443c3027c","https://github.com/apache/inlong","https://lists.apache.org/thread/xvomf66l58x4dmoyzojflvx52gkzcdmk","http://www.openwall.com/lists/oss-security/2024/03/06/1"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-p2gx-4434-pf6g","url":"https://osv.dev/vulnerability/GHSA-p2gx-4434-pf6g"}],"summary":"Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability"}