{"action":"Upgrade munkireport/softwareupdate to 1.6 or later.","affected":[{"fixed":"1.6","introduced":"0"}],"component":"munkireport/softwareupdate","cve_ids":["CVE-2020-15887"],"ecosystem":"Packagist","epss":0.01262,"exploited":false,"fixed_versions":["1.6"],"ghsa_id":"GHSA-4qgh-m9vp-48xp","id":"tcs_01M5KEV73W9RX8XV0B91APE432","modified_at":"2024-04-24T23:11:41.874925Z","published_at":"2022-05-24T17:24:15Z","references":["https://osv.dev/vulnerability/GHSA-4qgh-m9vp-48xp","https://nvd.nist.gov/vuln/detail/CVE-2020-15887","https://github.com/munkireport/munkireport-php/releases","https://github.com/munkireport/munkireport-php/releases/tag/v5.6.3","https://github.com/munkireport/munkireport-php/wiki/20200722-SQL-Injection-in-softwareupdate-module","https://github.com/munkireport/softwareupdate","https://github.com/munkireport/softwareupdate/releases"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-4qgh-m9vp-48xp","url":"https://osv.dev/vulnerability/GHSA-4qgh-m9vp-48xp"}],"summary":"MunkiReport Software Update module is vulnerable to SQL injection"}