{"action":"Upgrade contao/core to 3.2.19 or later.","affected":[{"fixed":"3.4.4","introduced":"3.4.0"},{"fixed":"3.2.19","introduced":"2.0.0"}],"component":"contao/core","cve_ids":["CVE-2015-0269"],"ecosystem":"Packagist","epss":0.02099,"exploited":false,"fixed_versions":["3.4.4","3.2.19"],"ghsa_id":"GHSA-4r6g-xhx7-fm36","id":"tcs_01M5KEV85YYJSN89XVXHEMQX29","modified_at":"2024-04-25T23:43:34.734539Z","published_at":"2022-05-17T02:42:22Z","references":["https://osv.dev/vulnerability/GHSA-4r6g-xhx7-fm36","https://nvd.nist.gov/vuln/detail/CVE-2015-0269","https://github.com/contao/core/commit/0229e839b4849e402256b972eb62f89f2c29674d","https://contao.org/en/news/contao-3_2_19.html","https://contao.org/en/news/contao-3_4_4.html","https://contao.org/en/news/directory-traversal-vulnerability-cve-2015-0269.html","https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/CVE-2015-0269.yaml","https://github.com/contao/core"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-4r6g-xhx7-fm36","url":"https://osv.dev/vulnerability/GHSA-4r6g-xhx7-fm36"}],"summary":"Contao Core directory traversal vulnerability"}