{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.0.210"}],"component":"processwire/processwire","cve_ids":["CVE-2023-24676"],"ecosystem":"Packagist","epss":0.01312,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2cvg-w29m-j8xc","id":"tcs_01M5KERVNATEG2GS408TS0T3E8","modified_at":"2024-02-16T08:06:06.900620Z","published_at":"2024-01-24T21:30:33Z","references":["https://osv.dev/vulnerability/GHSA-2cvg-w29m-j8xc","https://nvd.nist.gov/vuln/detail/CVE-2023-24676","https://github.com/processwire/processwire","https://medium.com/%40cupc4k3/reverse-shell-via-remote-file-inlusion-in-proccesswire-cms-a8fa5ace3255"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-2cvg-w29m-j8xc","url":"https://osv.dev/vulnerability/GHSA-2cvg-w29m-j8xc"}],"summary":"Arbitrary Code Execution in Processwire"}