{"action":"Upgrade october/rain to 1.0.468 or later.","affected":[{"fixed":"1.0.468","introduced":"1.0.319"}],"component":"october/rain","cve_ids":["CVE-2020-15128"],"ecosystem":"Packagist","epss":0.00689,"exploited":false,"fixed_versions":["1.0.468"],"ghsa_id":"GHSA-55mm-5399-7r63","id":"tcs_01M5KEVMYBCT52B4KCMX8TKK7C","modified_at":"2026-09-10T03:48:31.648209020Z","published_at":"2020-08-05T14:52:54Z","references":["https://osv.dev/vulnerability/GHSA-55mm-5399-7r63","https://github.com/octobercms/october/security/advisories/GHSA-55mm-5399-7r63","https://nvd.nist.gov/vuln/detail/CVE-2020-15128","https://github.com/octobercms/library/pull/508","https://github.com/octobercms/library/commit/28310d4fb336a1741b39498f4474497644a6875c"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-55mm-5399-7r63","url":"https://osv.dev/vulnerability/GHSA-55mm-5399-7r63"}],"summary":"Reliance on Cookies without validation in OctoberCMS"}