{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.12.7"}],"component":"anchorcms/anchor-cms","cve_ids":["CVE-2024-29338"],"ecosystem":"Packagist","epss":0.00255,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2whx-ccr7-fxqm","id":"tcs_01M5KESAVC8CZ2K5FV8QKEE2X0","modified_at":"2024-11-22T05:24:22.421200Z","published_at":"2024-03-22T18:30:31Z","references":["https://osv.dev/vulnerability/GHSA-2whx-ccr7-fxqm","https://nvd.nist.gov/vuln/detail/CVE-2024-29338","https://github.com/PWwwww123/cms/blob/main/1.md","https://github.com/anchorcms/anchor-cms"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-2whx-ccr7-fxqm","url":"https://osv.dev/vulnerability/GHSA-2whx-ccr7-fxqm"}],"summary":"Cross-Site Request Forgery in Anchor CMS"}