{"action":"Upgrade dweeves/magmi to 0.7.22 or later.","affected":[{"fixed":"0.7.22","introduced":"0"}],"component":"dweeves/magmi","cve_ids":["CVE-2015-2068"],"ecosystem":"Packagist","epss":0.1404,"exploited":false,"fixed_versions":["0.7.22"],"ghsa_id":"GHSA-27v2-398x-f74x","id":"tcs_01M5KERPDW9JEAF39ZBC3EJ5CN","modified_at":"2024-12-06T05:38:58.390228Z","published_at":"2022-05-13T01:25:28Z","references":["https://osv.dev/vulnerability/GHSA-27v2-398x-f74x","https://nvd.nist.gov/vuln/detail/CVE-2015-2068","https://github.com/dweeves/magmi-git","http://packetstormsecurity.com/files/130250/Magento-Server-MAGMI-Cross-Site-Scripting-Local-File-Inclusion.html","http://www.exploit-db.com/exploits/35996","http://www.securityfocus.com/bid/74879"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-27v2-398x-f74x","url":"https://osv.dev/vulnerability/GHSA-27v2-398x-f74x"}],"summary":"MAGMI cross-site scripting (XSS)"}