{"action":"Upgrade derhansen/sf_event_mgt to 7.4.0 or later.","affected":[{"fixed":"7.4.0","introduced":"7.0.0"}],"component":"derhansen/sf_event_mgt","cve_ids":["CVE-2024-24751"],"ecosystem":"Packagist","epss":0.00485,"exploited":false,"fixed_versions":["7.4.0"],"ghsa_id":"GHSA-4576-pgh2-g34j","id":"tcs_01M5KETMGK809BBGCWNQHD2NYZ","modified_at":"2026-09-10T03:50:05.385774761Z","published_at":"2024-02-13T17:01:16Z","references":["https://osv.dev/vulnerability/GHSA-4576-pgh2-g34j","https://github.com/derhansen/sf_event_mgt/security/advisories/GHSA-4576-pgh2-g34j","https://nvd.nist.gov/vuln/detail/CVE-2024-24751","https://github.com/derhansen/sf_event_mgt/commit/a08c2cd48695c07e462d15eeb70434ddc0206e4c","https://github.com/derhansen/sf_event_mgt"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-4576-pgh2-g34j","url":"https://osv.dev/vulnerability/GHSA-4576-pgh2-g34j"}],"summary":"derhansen/sf_event_mgt vulnerable to Broken Access Control in Backend Module"}