{"action":"Upgrade automad/automad to 2.0.0-alpha.1 or later.","affected":[{"fixed":"2.0.0-alpha.1","introduced":"0"}],"component":"automad/automad","cve_ids":["CVE-2023-7038"],"ecosystem":"Packagist","epss":0.0039,"exploited":false,"fixed_versions":["2.0.0-alpha.1"],"ghsa_id":"GHSA-4j8w-p6hv-3qxc","id":"tcs_01M5KEV2GCV9RASDEA9Q2E2QZW","modified_at":"2024-08-19T21:09:50.488272Z","published_at":"2023-12-21T18:30:23Z","references":["https://osv.dev/vulnerability/GHSA-4j8w-p6hv-3qxc","https://nvd.nist.gov/vuln/detail/CVE-2023-7038","https://github.com/marcantondahmen/automad","https://github.com/screetsec/VDD/tree/main/Automad%20CMS/Cross-Site%20Request%20Forgery%20(CSRF)","https://vuldb.com/?ctiid.248687","https://vuldb.com/?id.248687"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-4j8w-p6hv-3qxc","url":"https://osv.dev/vulnerability/GHSA-4j8w-p6hv-3qxc"}],"summary":"Cross-Site Request Forgery (CSRF) in automad/automad"}