{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.0.2"}],"component":"croogo/croogo","cve_ids":["CVE-2021-44673"],"ecosystem":"Packagist","epss":0.08963,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4pww-fqgh-36hj","id":"tcs_01M5KEV6J8HN2Q6B9PGPZ2WPFE","modified_at":"2024-02-16T08:16:17.986591Z","published_at":"2022-03-11T00:02:02Z","references":["https://osv.dev/vulnerability/GHSA-4pww-fqgh-36hj","https://nvd.nist.gov/vuln/detail/CVE-2021-44673","https://github.com/3erk1n/Vulnerabilities/blob/main/Croogo%203.0.2%20-%20Arbitrary%20File%20Upload-Remote%20Code%20Execution%20(Authenticated).txt","https://github.com/croogo/croogo"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-4pww-fqgh-36hj","url":"https://osv.dev/vulnerability/GHSA-4pww-fqgh-36hj"}],"summary":"Unrestricted Upload of File with Dangerous Type in Croogo"}