{"action":"Upgrade org.apache.ambari.contrib.views:wfmanager to 2.7.8 or later.","affected":[{"fixed":"2.7.8","introduced":"2.7.0"}],"component":"org.apache.ambari.contrib.views:wfmanager","cve_ids":["CVE-2023-50380"],"ecosystem":"Maven","epss":0.00865,"exploited":false,"fixed_versions":["2.7.8"],"ghsa_id":"GHSA-qrp9-23p7-g5mf","id":"tcs_01M5N9A7FYGDXCR2Y9G4AATQS9","modified_at":"2025-02-13T19:10:30Z","published_at":"2024-02-27T18:31:02Z","references":["https://osv.dev/vulnerability/GHSA-qrp9-23p7-g5mf","https://nvd.nist.gov/vuln/detail/CVE-2023-50380","https://github.com/apache/ambari/commit/d9652e4611ea36208d5f748028b3a9cd980e6edb","https://github.com/apache/ambari","https://lists.apache.org/thread/qrt7mq7v7zyrh1qsh1gkg1m7clysvy32","http://www.openwall.com/lists/oss-security/2024/02/27/6"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-qrp9-23p7-g5mf","url":"https://osv.dev/vulnerability/GHSA-qrp9-23p7-g5mf"}],"summary":"Apache Ambari XML External Entity injection"}