{"action":"Upgrade org.opennms:opennms-webapp-rest to 32.0.2 or later.","affected":[{"fixed":"32.0.2","introduced":"31.0.8"}],"component":"org.opennms:opennms-webapp-rest","cve_ids":["CVE-2023-0872"],"ecosystem":"Maven","epss":0.03312,"exploited":false,"fixed_versions":["32.0.2"],"ghsa_id":"GHSA-w5gq-xrrp-3fxf","id":"tcs_01M5N9FN07WFHBTX01SEDZECS7","modified_at":"2023-11-08T04:11:12.998411Z","published_at":"2023-08-14T18:32:59Z","references":["https://osv.dev/vulnerability/GHSA-w5gq-xrrp-3fxf","https://nvd.nist.gov/vuln/detail/CVE-2023-0872","https://github.com/OpenNMS/opennms/pull/6354","https://github.com/OpenNMS/opennms/commit/e59b0ddd164cf0598ac0294d11a2d677d9e310b8","https://docs.opennms.com/horizon/32/releasenotes/changelog.html","https://github.com/OpenNMS/opennms"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-w5gq-xrrp-3fxf","url":"https://osv.dev/vulnerability/GHSA-w5gq-xrrp-3fxf"}],"summary":"OpenNMS privilege elevation vulnerability"}