{"action":"Upgrade org.apache.cassandra:apache-cassandra to 2.0.14 (2.0.x) or 2.1.4 (2.1.x) or later.","affected":[{"fixed":"2.0.14","introduced":"1.2.0"},{"fixed":"2.1.4","introduced":"2.1.0"}],"component":"org.apache.cassandra:apache-cassandra","cve_ids":["CVE-2015-0225"],"ecosystem":"Maven","epss":0.06645,"exploited":false,"fixed_versions":["2.0.14","2.1.4"],"ghsa_id":"GHSA-w7f2-gjxf-2gm9","id":"tcs_01M5N9FV4M08A92TBJMH1ZGX8S","modified_at":"2024-12-05T05:43:23.250314Z","published_at":"2022-05-14T02:49:56Z","references":["https://osv.dev/vulnerability/GHSA-w7f2-gjxf-2gm9","https://nvd.nist.gov/vuln/detail/CVE-2015-0225","http://packetstormsecurity.com/files/131249/Apache-Cassandra-Remote-Code-Execution.html","http://rhn.redhat.com/errata/RHSA-2015-1947.html","http://www.mail-archive.com/user@cassandra.apache.org/msg41819.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-w7f2-gjxf-2gm9","url":"https://osv.dev/vulnerability/GHSA-w7f2-gjxf-2gm9"}],"summary":"Improper Neutralization of Special Elements used in a Command in Apache Cassandra"}