{"action":"Upgrade silverstripe/framework to 3.1.17 or later.","affected":[{"fixed":"3.1.17","introduced":"0"},{"fixed":"3.2.2","introduced":"3.2.0"},{"fixed":"3.3.0","introduced":"3.3.0-beta1"}],"component":"silverstripe/framework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["3.1.17","3.2.2","3.3.0"],"ghsa_id":"GHSA-2hpc-mf4q-j885","id":"tcs_01M5KERZQZXSAMDXY7S59KS3DW","modified_at":"2024-11-28T05:23:17.093348Z","published_at":"2024-05-23T19:19:33Z","references":["https://osv.dev/vulnerability/GHSA-2hpc-mf4q-j885","https://github.com/silverstripe/silverstripe-framework/commit/013524af5069bb0cf909853f04418d9bef56d18c","https://github.com/silverstripe/silverstripe-framework/commit/56e92f5a32e45849cc9361c8603c31d7010c9d36","https://github.com/silverstripe/silverstripe-framework/commit/e2c77c5a8f13e901c51a3684210811559b592f0c","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2016-002-1.yaml","https://github.com/silverstripe/silverstripe-framework","https://www.silverstripe.org/download/security-releases/ss-2016-002"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-2hpc-mf4q-j885","url":"https://osv.dev/vulnerability/GHSA-2hpc-mf4q-j885"}],"summary":"Silverstripe CSRF vulnerability in GridFieldAddExistingAutocompleter"}