{"action":"Upgrade org.apache.jackrabbit:jackrabbit-standalone-components to 2.20.11 (2.20.x) or 2.21.18 (2.21.x) or later.","affected":[{"fixed":"2.21.18","introduced":"2.21.0"},{"fixed":"2.20.11","introduced":"1.0.0"}],"component":"org.apache.jackrabbit:jackrabbit-standalone-components","cve_ids":["CVE-2023-37895"],"ecosystem":"Maven","epss":0.03239,"exploited":false,"fixed_versions":["2.21.18","2.20.11"],"ghsa_id":"GHSA-q8cm-3v62-jj79","id":"tcs_01M5N992HA2T4S579FZKMJ3VRP","modified_at":"2025-02-13T19:13:50.567914Z","published_at":"2023-07-25T15:30:26Z","references":["https://osv.dev/vulnerability/GHSA-q8cm-3v62-jj79","https://nvd.nist.gov/vuln/detail/CVE-2023-37895","https://github.com/apache/jackrabbit","https://lists.apache.org/list.html?users@jackrabbit.apache.org","https://lists.apache.org/thread/j03b3qdhborc2jrhdc4d765d3jkh8bfw","http://seclists.org/fulldisclosure/2023/Jul/43","http://www.openwall.com/lists/oss-security/2023/07/25/8"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-q8cm-3v62-jj79#Maven/org.apache.jackrabbit:jackrabbit-standalone-components","url":"https://osv.dev/vulnerability/GHSA-q8cm-3v62-jj79"}],"summary":"Remote code execution in Apache Jackrabbit"}