{"action":"Upgrade org.apache.streampark:streampark to 2.1.2 or later.","affected":[{"fixed":"2.1.2","introduced":"2.0.0"}],"component":"org.apache.streampark:streampark","cve_ids":["CVE-2023-49898"],"ecosystem":"Maven","epss":0.02299,"exploited":false,"fixed_versions":["2.1.2"],"ghsa_id":"GHSA-qg44-xqwj-wc28","id":"tcs_01M5N99F90F8WAH4A90RQT1H7D","modified_at":"2024-12-03T06:06:51.288045Z","published_at":"2023-12-15T15:30:27Z","references":["https://osv.dev/vulnerability/GHSA-qg44-xqwj-wc28","https://nvd.nist.gov/vuln/detail/CVE-2023-49898","https://github.com/apache/incubator-streampark","https://lists.apache.org/thread/qj99c03r4td35f8gbxq084b8qmv2fyr3"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-qg44-xqwj-wc28","url":"https://osv.dev/vulnerability/GHSA-qg44-xqwj-wc28"}],"summary":"Apache StreamPark: Authenticated system users could trigger remote command execution"}