{"action":"Upgrade librenms/librenms to 1.65.1 or later.","affected":[{"fixed":"1.65.1","introduced":"0"}],"component":"librenms/librenms","cve_ids":["CVE-2020-15877"],"ecosystem":"Packagist","epss":0.01918,"exploited":false,"fixed_versions":["1.65.1"],"ghsa_id":"GHSA-3c33-3465-fhx2","id":"tcs_01M5KESW0BDEGQE3K2GEP4B8KK","modified_at":"2023-11-08T04:02:38.333967Z","published_at":"2021-09-08T17:27:16Z","references":["https://osv.dev/vulnerability/GHSA-3c33-3465-fhx2","https://nvd.nist.gov/vuln/detail/CVE-2020-15877","https://github.com/librenms/librenms/pull/11915","https://github.com/librenms/librenms/commit/e5bb6d80bc308fc56b9a01ffb76c34159995353c","https://community.librenms.org/c/announcements","https://github.com/librenms/librenms/compare/1.65...1.65.1","https://github.com/librenms/librenms/releases/tag/1.65.1","https://shielder.it/blog"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-3c33-3465-fhx2","url":"https://osv.dev/vulnerability/GHSA-3c33-3465-fhx2"}],"summary":"Exposure of Resource to Wrong Sphere in LibreNMS"}