{"action":"Upgrade org.apache.ambari.contrib.views:ambari-contrib-views to 2.7.8 or later.","affected":[{"fixed":"2.7.8","introduced":"2.7.0"}],"component":"org.apache.ambari.contrib.views:ambari-contrib-views","cve_ids":["CVE-2023-50379"],"ecosystem":"Maven","epss":0.01064,"exploited":false,"fixed_versions":["2.7.8"],"ghsa_id":"GHSA-rghc-9fhx-h32m","id":"tcs_01M5N9BTK4SVWCF4AGDXDCQH05","modified_at":"2025-02-13T19:10:36Z","published_at":"2024-02-27T09:31:16Z","references":["https://osv.dev/vulnerability/GHSA-rghc-9fhx-h32m","https://nvd.nist.gov/vuln/detail/CVE-2023-50379","https://github.com/apache/ambari","https://lists.apache.org/thread/jglww6h6ngxpo1r6r5fx7ff7z29lnvv8","http://www.openwall.com/lists/oss-security/2024/02/27/1"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-rghc-9fhx-h32m","url":"https://osv.dev/vulnerability/GHSA-rghc-9fhx-h32m"}],"summary":"Apache Ambari: authenticated users could perform command injection to perform RCE"}