{"action":"Upgrade erxes to 1.6.2 or later.","affected":[{"fixed":"1.6.2","introduced":"0"}],"component":"erxes","cve_ids":["CVE-2024-57189"],"ecosystem":"npm","epss":0.00387,"exploited":false,"fixed_versions":["1.6.2"],"ghsa_id":"GHSA-2977-5php-6789","id":"tcs_01M5KESK6671R3PC5DDVQCWQ6W","modified_at":"2025-06-10T21:12:11.122406Z","published_at":"2025-06-10T18:32:27Z","references":["https://osv.dev/vulnerability/GHSA-2977-5php-6789","https://nvd.nist.gov/vuln/detail/CVE-2024-57189","https://github.com/erxes/erxes/commit/d626070a0fcd435ae29e689aca051ccfb440c2f3","https://github.com/erxes/erxes","https://www.sonarsource.com/blog/micro-services-major-headaches-detecting-vulnerabilities-in-erxes-microservices"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-2977-5php-6789","url":"https://osv.dev/vulnerability/GHSA-2977-5php-6789"},{"source":"nvd","source_id":"CVE-2024-57189","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-57189"}],"summary":"Erxes Path Traversal vulnerability"}