{"action":"Upgrade dl/yag to 3.0.1 or later.","affected":[{"fixed":"3.0.1","introduced":"0"}],"component":"dl/yag","cve_ids":["CVE-2014-6289"],"ecosystem":"Packagist","epss":0.01523,"exploited":false,"fixed_versions":["3.0.1"],"ghsa_id":"GHSA-46fq-683f-2jwq","id":"tcs_01M5KETQ339DHSNFRZ85MQ0SHS","modified_at":"2025-04-14T20:12:17.577723Z","published_at":"2022-05-17T04:31:54Z","references":["https://osv.dev/vulnerability/GHSA-46fq-683f-2jwq","https://nvd.nist.gov/vuln/detail/CVE-2014-6289","https://github.com/YAG-Gallery/yag/commit/4ab6ca121044d31b3822ab0c922053a9de8ee4ef","https://github.com/punktDe/pt_extbase/commit/9969635830fcf5c3222de0fd9dc0d9a05f8d6cb1","https://typo3.org/security/advisory/typo3-ext-sa-2014-005","http://typo3.org/extensions/repository/view/pt_extbase","http://typo3.org/extensions/repository/view/yag"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-46fq-683f-2jwq","url":"https://osv.dev/vulnerability/GHSA-46fq-683f-2jwq"}],"summary":"yag and pt_extbase extensions for TYPO3 allow remote attackers to bypass access restrictions"}