{"action":"Upgrade pimcore/pimcore to 10.5.22 or later.","affected":[{"fixed":"10.5.22","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2023-2984"],"ecosystem":"Packagist","epss":0.00854,"exploited":false,"fixed_versions":["10.5.22"],"ghsa_id":"GHSA-46g3-f9r8-xj4v","id":"tcs_01M5KETQ75M3BPCSGJRYGE2NPR","modified_at":"2024-02-16T08:10:27.693178Z","published_at":"2023-06-06T01:51:34Z","references":["https://osv.dev/vulnerability/GHSA-46g3-f9r8-xj4v","https://github.com/pimcore/pimcore/security/advisories/GHSA-46g3-f9r8-xj4v","https://nvd.nist.gov/vuln/detail/CVE-2023-2984","https://github.com/pimcore/pimcore/commit/e8dbc4da58ae86618bceb67ed35ce23e5e54d2ed","https://github.com/pimcore/pimcore","https://huntr.dev/bounties/5df8b951-e2f1-4548-a7e3-601186e1b191"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-46g3-f9r8-xj4v","url":"https://osv.dev/vulnerability/GHSA-46g3-f9r8-xj4v"}],"summary":"Pimcore vulnerable to Pre-Auth Path Traversal in pimcore_log parameter"}