{"action":"Upgrade org.apache.cassandra:cassandra-all to 4.0.15 (4.0.x), 4.1.8 (4.1.x) or 5.0.3 (5.0.x) or later.","affected":[{"fixed":"5.0.3","introduced":"5.0-beta1"},{"fixed":"4.1.8","introduced":"4.1.0"},{"fixed":"4.0.15","introduced":"4.0.2"}],"component":"org.apache.cassandra:cassandra-all","cve_ids":["CVE-2024-27137"],"ecosystem":"Maven","exploited":false,"fixed_versions":["5.0.3","4.1.8","4.0.15"],"ghsa_id":"GHSA-rgfx-7p65-3ff4","id":"tcs_01M5N9BS4AMMW84TC8SHDEMHS9","modified_at":"2025-02-20T19:56:43.212341Z","published_at":"2025-02-04T12:30:59Z","references":["https://osv.dev/vulnerability/GHSA-rgfx-7p65-3ff4","https://nvd.nist.gov/vuln/detail/CVE-2024-27137","https://github.com/apache/cassandra","https://lists.apache.org/thread/jsk87d9yv8r204mgqpz1qxtp5wcrpysm","https://security.netapp.com/advisory/ntap-20250214-0004"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-rgfx-7p65-3ff4","url":"https://osv.dev/vulnerability/GHSA-rgfx-7p65-3ff4"}],"summary":"Apache Cassandra: unrestricted deserialization of JMX authentication credentials"}