{"action":"Upgrade forkcms/forkcms to 3.2.5 or later.","affected":[{"fixed":"3.2.5","introduced":"0"}],"component":"forkcms/forkcms","cve_ids":["CVE-2012-1207"],"ecosystem":"Packagist","epss":0.0169,"exploited":false,"fixed_versions":["3.2.5"],"ghsa_id":"GHSA-4x28-j85r-668q","id":"tcs_01M5KEVDFH2Q3MPN5EC3CZZC4Q","modified_at":"2024-01-12T18:26:36.858362Z","published_at":"2022-05-17T01:48:24Z","references":["https://osv.dev/vulnerability/GHSA-4x28-j85r-668q","https://nvd.nist.gov/vuln/detail/CVE-2012-1207","https://github.com/forkcms/forkcms/commit/a9986b86c53de0582248b39605660fbba0c21a29","https://exchange.xforce.ibmcloud.com/vulnerabilities/73169","https://github.com/forkcms/forkcms","https://web.archive.org/web/20120401204340/http://www.securityfocus.com/bid/51972","http://packetstormsecurity.org/files/109709/Fork-CMS-3.2.4-Cross-Site-Scripting-Local-File-Inclusion.html","http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-4x28-j85r-668q","url":"https://osv.dev/vulnerability/GHSA-4x28-j85r-668q"}],"summary":"ForkCMS Directory Traversal vulnerability"}