{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.12.7"}],"component":"anchorcms/anchor-cms","cve_ids":["CVE-2024-29499"],"ecosystem":"Packagist","epss":0.00251,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4xw8-9fj7-j58j","id":"tcs_01M5KEVF42AFJEHNQZFHJQN5QF","modified_at":"2024-03-22T20:56:57.619119Z","published_at":"2024-03-22T18:30:31Z","references":["https://osv.dev/vulnerability/GHSA-4xw8-9fj7-j58j","https://nvd.nist.gov/vuln/detail/CVE-2024-29499","https://github.com/anchorcms/anchor-cms","https://github.com/daddywolf/cms/blob/main/1.md"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-4xw8-9fj7-j58j","url":"https://osv.dev/vulnerability/GHSA-4xw8-9fj7-j58j"}],"summary":"Cross-Site Request Forgery in Anchor CMS"}