{"action":"Upgrade intelliants/subrion to 4.1.0 or later.","affected":[{"fixed":"4.1.0","introduced":"4.0.5"}],"component":"intelliants/subrion","cve_ids":["CVE-2017-5543"],"ecosystem":"Packagist","epss":0.02031,"exploited":false,"fixed_versions":["4.1.0"],"ghsa_id":"GHSA-4j79-4m6q-77vf","id":"tcs_01M5KEV2E7WBVQKHVHCHVQ30QQ","modified_at":"2024-04-25T22:11:45.385895Z","published_at":"2022-05-14T02:00:54Z","references":["https://osv.dev/vulnerability/GHSA-4j79-4m6q-77vf","https://nvd.nist.gov/vuln/detail/CVE-2017-5543","https://github.com/intelliants/subrion/issues/297","https://github.com/intelliants/subrion/commit/019dee20a38f39a5827aae2eb92f09b1f6afb7bb","https://github.com/intelliants/subrion","http://www.securityfocus.com/bid/95688"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-4j79-4m6q-77vf","url":"https://osv.dev/vulnerability/GHSA-4j79-4m6q-77vf"}],"summary":"Subrion CMS PHP Object Injection"}