{"action":"Upgrade solidus_core to 2.11.12 or later.","affected":[{"fixed":"2.11.12","introduced":"0"},{"fixed":"3.0.3","introduced":"3.0.0"},{"fixed":"3.1.3","introduced":"3.1.0"}],"component":"solidus_core","cve_ids":[],"ecosystem":"RubyGems","exploited":false,"fixed_versions":["2.11.12","3.0.3","3.1.3"],"ghsa_id":"GHSA-5629-8855-gf4g","id":"tcs_01M5KEGVJZ875WMKCJF8BK5PGS","modified_at":"2024-12-02T05:46:57.659354Z","published_at":"2021-11-18T20:12:40Z","references":["https://osv.dev/vulnerability/GHSA-5629-8855-gf4g","https://github.com/solidusio/solidus/security/advisories/GHSA-5629-8855-gf4g","https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2","https://github.com/solidusio/solidus"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-5629-8855-gf4g","url":"https://osv.dev/vulnerability/GHSA-5629-8855-gf4g"}],"summary":"Authentication Bypass by CSRF Weakness"}