{"action":"Upgrade snipe/snipe-it to 6.2.3 or later.","affected":[{"fixed":"6.2.3","introduced":"0"}],"component":"snipe/snipe-it","cve_ids":["CVE-2023-5511"],"ecosystem":"Packagist","epss":0.00303,"exploited":false,"fixed_versions":["6.2.3"],"ghsa_id":"GHSA-33vj-r6p6-x4p8","id":"tcs_01M5KESHC0PPSYFTBN2C8F2TNF","modified_at":"2024-02-16T08:21:22.272328Z","published_at":"2023-10-11T03:30:32Z","references":["https://osv.dev/vulnerability/GHSA-33vj-r6p6-x4p8","https://nvd.nist.gov/vuln/detail/CVE-2023-5511","https://github.com/snipe/snipe-it/commit/6d55d782806c9660e9e65dc5250faacb5d0033ed","https://github.com/snipe/snipe-it","https://huntr.dev/bounties/43206801-9862-48da-b379-e55e341d78bf"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-33vj-r6p6-x4p8","url":"https://osv.dev/vulnerability/GHSA-33vj-r6p6-x4p8"}],"summary":"Cross-Site Request Forgery (CSRF) in snipe/snipe-it"}