{"action":"Upgrade org.apache.geronimo.plugins:console to 2.1.4 or later.","affected":[{"fixed":"2.1.4","introduced":"2.1.0"}],"component":"org.apache.geronimo.plugins:console","cve_ids":["CVE-2008-5518"],"ecosystem":"Maven","epss":0.35929,"exploited":false,"fixed_versions":["2.1.4"],"ghsa_id":"GHSA-xm92-rf24-h74w","id":"tcs_01M5N9JK6YX4DXDQE9GWTS5F9R","modified_at":"2024-12-04T05:40:39.088704Z","published_at":"2022-05-14T02:40:10Z","references":["https://osv.dev/vulnerability/GHSA-xm92-rf24-h74w","https://nvd.nist.gov/vuln/detail/CVE-2008-5518","https://github.com/apache/geronimo/commit/aa0c2c26dde8930cad924796af7c17a13d236b16","https://exchange.xforce.ibmcloud.com/vulnerabilities/49898","https://exchange.xforce.ibmcloud.com/vulnerabilities/49899","https://exchange.xforce.ibmcloud.com/vulnerabilities/49900","https://github.com/apache/geronimo","https://web.archive.org/web/20090419162753/http://secunia.com/advisories/34715","https://web.archive.org/web/20090422192030/http://dsecrg.com/pages/vul/show.php?id=118","https://web.archive.org/web/20200229223125/http://www.securityfocus.com/bid/34562","https://www.exploit-db.com/exploits/8458","http://geronimo.apache.org/21x-security-report.html#2.1.xSecurityReport-214","http://issues.apache.org/jira/browse/GERONIMO-4597"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-xm92-rf24-h74w","url":"https://osv.dev/vulnerability/GHSA-xm92-rf24-h74w"}],"summary":"Apache Geronimo Application Server multiple directory traversal vulnerabilities"}