{"action":"Upgrade nitsan/ns-backup to 13.0.1 or later.","affected":[{"fixed":"13.0.1","introduced":"0"}],"component":"nitsan/ns-backup","cve_ids":["CVE-2025-48204"],"ecosystem":"Packagist","epss":0.00769,"exploited":false,"fixed_versions":["13.0.1"],"ghsa_id":"GHSA-463c-jhp2-4mm7","id":"tcs_01M5KETPFE28CKWN5M6EPWCCZV","modified_at":"2026-09-10T03:50:24.311694372Z","published_at":"2025-05-21T18:33:30Z","references":["https://osv.dev/vulnerability/GHSA-463c-jhp2-4mm7","https://nvd.nist.gov/vuln/detail/CVE-2025-48204","https://github.com/nitsan-technologies/ns_backup/commit/67b8102a19e8e516dc4228f5c42f9e4fba5046cb","https://github.com/nitsan-technologies/ns_backup","https://typo3.org/security/advisory/typo3-ext-sa-2025-007"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-463c-jhp2-4mm7","url":"https://osv.dev/vulnerability/GHSA-463c-jhp2-4mm7"},{"source":"nvd","source_id":"CVE-2025-48204","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48204"}],"summary":"The Backup Plus extension for TYPO3 (ns_backup) allows command injections"}