{"action":"Upgrade uptime-kuma to 1.23.16 or later.","affected":[{"fixed":"1.23.16","introduced":"1.23.0"},{"fixed":"2.0.0-beta.1","introduced":"2.0.0-beta.0"}],"component":"uptime-kuma","cve_ids":["CVE-2024-56331"],"ecosystem":"npm","epss":0.01845,"exploited":false,"fixed_versions":["1.23.16","2.0.0-beta.1"],"ghsa_id":"GHSA-2qgm-m29m-cj2h","id":"tcs_01M5KETVZFERAWAQH9S6DDB9EB","modified_at":"2024-12-20T21:36:55Z","published_at":"2024-12-20T15:10:46Z","references":["https://osv.dev/vulnerability/GHSA-2qgm-m29m-cj2h","https://github.com/louislam/uptime-kuma/security/advisories/GHSA-2qgm-m29m-cj2h","https://nvd.nist.gov/vuln/detail/CVE-2024-56331","https://github.com/louislam/uptime-kuma/commit/6cfae01a0d3727c517afe512fc8fec1d99acf875","https://github.com/louislam/uptime-kuma","https://github.com/louislam/uptime-kuma/releases/tag/1.23.16"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-2qgm-m29m-cj2h","url":"https://osv.dev/vulnerability/GHSA-2qgm-m29m-cj2h"}],"summary":"uptime-kuma vulnerable to Local File Inclusion (LFI) via Improper URL Handling in `Real-Browser` monitor"}