What is GHSA-338x-hfx8-vx9x?

GHSA-338x-hfx8-vx9x is a security advisory published by GitHub Security Advisories with Critical severity. Apache Karaf Cave: Cave SSRF and arbitrary file access

Which CVE IDs does GHSA-338x-hfx8-vx9x cover?

GHSA-338x-hfx8-vx9x covers the following CVE IDs: CVE-2024-34365. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-338x-hfx8-vx9x?

GHSA-338x-hfx8-vx9x has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

Which products are affected by GHSA-338x-hfx8-vx9x?

GHSA-338x-hfx8-vx9x affects 1 product, including: maven/org.apache.karaf:cave:\u003c= 4.1.2.

GHSA-338x-hfx8-vx9xCriticalCVSS 9.1

Apache Karaf Cave: Cave SSRF and arbitrary file access

Vendor

GitHub Security Advisories

Published

May 14, 2024

Last Modified

February 13, 2025

🔗 CVE IDs covered (1)

CVE-2024-34365 →

📋 Description

This issue affects all versions of Apache Karaf Cave.

As this project is retired, there are no plans to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

🎯 Affected products1

maven/org.apache.karaf:cave:<= 4.1.2

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2024-34365
https://karaf.apache.org/security/cve-2024-34365.txt
http://www.openwall.com/lists/oss-security/2024/05/09/5
https://github.com/advisories/GHSA-338x-hfx8-vx9x