{"action":"Upgrade civicrm/civicrm-core to 4.2.9 or later.","affected":[{"fixed":"4.2.9","introduced":"4.2.0"},{"fixed":"4.3.3","introduced":"4.3.0"}],"component":"civicrm/civicrm-core","cve_ids":["CVE-2013-4662"],"ecosystem":"Packagist","epss":0.01015,"exploited":false,"fixed_versions":["4.2.9","4.3.3"],"ghsa_id":"GHSA-4465-r2hg-v4rj","id":"tcs_01M5KETJD8XCMPKWE5G8RHGHZ2","modified_at":"2023-11-08T03:57:24.206289Z","published_at":"2022-05-17T04:52:06Z","references":["https://osv.dev/vulnerability/GHSA-4465-r2hg-v4rj","https://nvd.nist.gov/vuln/detail/CVE-2013-4662","https://civicrm.org/advisory/civi-sa-2013-004-limited-sql-injection-quick-search-api","https://github.com/civicrm/civicrm-core","https://issues.civicrm.org/jira/browse/CRM-12765"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-4465-r2hg-v4rj","url":"https://osv.dev/vulnerability/GHSA-4465-r2hg-v4rj"}],"summary":"CiviCRM SQL injection vulnerability via Quick Search API"}