{"action":"Upgrade ezsystems/ezpublish-legacy to 5.4.14.2 or later.","affected":[{"fixed":"2019.3.5.1","introduced":"2019.3.0"},{"fixed":"2017.12.7.3","introduced":"2017.12.0"},{"fixed":"5.4.14.2","introduced":"5.4.0"}],"component":"ezsystems/ezpublish-legacy","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2019.3.5.1","2017.12.7.3","5.4.14.2"],"ghsa_id":"GHSA-39j2-4p9j-5w4j","id":"tcs_01M5KESVD83G289D4YPK7RXE60","modified_at":"2024-11-29T05:26:35.611726Z","published_at":"2024-05-15T21:32:29Z","references":["https://osv.dev/vulnerability/GHSA-39j2-4p9j-5w4j","https://ezplatform.com/security-advisories/ibexa-sa-2020-006-object-injection-in-legacy-shop-module","https://github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezpublish-legacy/2020-10-05-1.yaml","https://github.com/ezsystems/ezpublish-legacy"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-39j2-4p9j-5w4j","url":"https://osv.dev/vulnerability/GHSA-39j2-4p9j-5w4j"}],"summary":"Ez Platform Object Injection in legacy shop module"}