{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.8.0"}],"component":"org.apache.submarine:submarine-server-core","cve_ids":["CVE-2024-36263"],"ecosystem":"Maven","epss":0.00963,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-v74c-qc46-9gg9","id":"tcs_01M5N9DGS87QZ6P9EVZCEN31KH","modified_at":"2025-02-13T19:13:48.053662Z","published_at":"2024-06-12T15:31:45Z","references":["https://osv.dev/vulnerability/GHSA-v74c-qc46-9gg9","https://nvd.nist.gov/vuln/detail/CVE-2024-36263","https://github.com/apache/submarine/pull/1121","https://github.com/apache/submarine/commit/4e68894a1c54d763ac2697ea1ac993793da4107c","https://github.com/apache/submarine","https://lists.apache.org/thread/8q9kbdg9gk9kpz5p8x6t7q8709l3vrmt","http://www.openwall.com/lists/oss-security/2024/06/12/1"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-v74c-qc46-9gg9","url":"https://osv.dev/vulnerability/GHSA-v74c-qc46-9gg9"}],"summary":"Apache Submarine Server Core has a SQL Injection Vulnerability"}