{"action":"Upgrade org.apache.jmeter:ApacheJMeter to 5.1 or later.","affected":[{"fixed":"5.1","introduced":"0"}],"component":"org.apache.jmeter:ApacheJMeter","cve_ids":["CVE-2019-0187"],"ecosystem":"Maven","epss":0.02636,"exploited":false,"fixed_versions":["5.1"],"ghsa_id":"GHSA-wg37-7mrv-cfwm","id":"tcs_01M5N9GAPCW7GN41WEXYXPFG96","modified_at":"2023-11-08T04:00:30.554383Z","published_at":"2019-03-07T18:47:57Z","references":["https://osv.dev/vulnerability/GHSA-wg37-7mrv-cfwm","https://nvd.nist.gov/vuln/detail/CVE-2019-0187","https://github.com/advisories/GHSA-wg37-7mrv-cfwm","http://mail-archives.apache.org/mod_mbox/jmeter-user/201903.mbox/%3CCAH9fUpaUQaFbgY1Zh4OvKSL4wdvGAmVt%2Bn4fegibDoAxK5XARw%40mail.gmail.com%3E","http://www.securityfocus.com/bid/107219"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-wg37-7mrv-cfwm","url":"https://osv.dev/vulnerability/GHSA-wg37-7mrv-cfwm"}],"summary":"Unauthenticated Remote Code Execution in Apache JMeter"}