{"action":"Upgrade friendsoftypo3/mediace to 7.6.5 or later.","affected":[{"fixed":"7.6.5","introduced":"7.6.2"}],"component":"friendsoftypo3/mediace","cve_ids":["CVE-2020-15086"],"ecosystem":"Packagist","epss":0.03556,"exploited":false,"fixed_versions":["7.6.5"],"ghsa_id":"GHSA-4h44-w6fm-548g","id":"tcs_01M5KEV01KC8X0D4ZJ12XM0T50","modified_at":"2026-07-08T06:28:17.992464072Z","published_at":"2020-07-29T16:15:12Z","references":["https://osv.dev/vulnerability/GHSA-4h44-w6fm-548g","https://github.com/FriendsOfTYPO3/mediace/security/advisories/GHSA-4h44-w6fm-548g","https://nvd.nist.gov/vuln/detail/CVE-2020-15086","https://github.com/FriendsOfTYPO3/mediace/pull/31","https://github.com/FriendsOfTYPO3/mediace/commit/fa29ffd3e8b275782a8600d2406e1b1e5e16ae75","https://github.com/FriendsOfPHP/security-advisories/blob/master/friendsoftypo3/mediace/CVE-2020-15086.yaml","https://github.com/FriendsOfTYPO3/mediace","https://typo3.org/security/advisory/typo3-ext-sa-2020-014"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-4h44-w6fm-548g","url":"https://osv.dev/vulnerability/GHSA-4h44-w6fm-548g"}],"summary":"Potential Remote Code Execution in TYPO3 with mediace extension"}