{"action":"Upgrade org.apache.cassandra:cassandra-all to 3.0.31 (3.0.x), 3.11.18 (3.11.x), 4.0.16 (4.0.x), 4.1.8 (4.1.x) or 5.0.3 (5.0.x) or later.","affected":[{"fixed":"5.0.3","introduced":"5.0-alpha1"},{"fixed":"4.1.8","introduced":"4.1-alpha1"},{"fixed":"4.0.16","introduced":"4.0-alpha1"},{"fixed":"3.11.18","introduced":"3.1"},{"fixed":"3.0.31","introduced":"0"}],"component":"org.apache.cassandra:cassandra-all","cve_ids":["CVE-2025-23015"],"ecosystem":"Maven","epss":0.0101,"exploited":false,"fixed_versions":["5.0.3","4.1.8","4.0.16","3.11.18","3.0.31"],"ghsa_id":"GHSA-wmcc-9vch-jmx4","id":"tcs_01M5N9GRTVCM2JHRGA9BY41BDK","modified_at":"2025-02-18T22:30:54Z","published_at":"2025-02-04T12:30:59Z","references":["https://osv.dev/vulnerability/GHSA-wmcc-9vch-jmx4","https://nvd.nist.gov/vuln/detail/CVE-2025-23015","https://github.com/apache/cassandra/commit/6207a305ba2b0cebc3241e00a843ab5dbf86d2ed","https://github.com/apache/cassandra/commit/f33267c8fae6d71166886efc3e7ddda4114ebeef","https://github.com/apache/cassandra","https://lists.apache.org/thread/jmks4msbgkl65ssg69x728sv1m0hwz3s","https://security.netapp.com/advisory/ntap-20250214-0006","http://www.openwall.com/lists/oss-security/2025/02/03/2","http://www.openwall.com/lists/oss-security/2025/02/11/1"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-wmcc-9vch-jmx4","url":"https://osv.dev/vulnerability/GHSA-wmcc-9vch-jmx4"}],"summary":"Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions"}