{"action":"Upgrade silverstripe/framework to 4.4.6 or later.","affected":[{"fixed":"4.4.6","introduced":"4.0.0"}],"component":"silverstripe/framework","cve_ids":["CVE-2020-9280"],"ecosystem":"Packagist","epss":0.01729,"exploited":false,"fixed_versions":["4.4.6"],"ghsa_id":"GHSA-592m-4533-rxq9","id":"tcs_01M5KEVTP22VVC4V1JSVT47SMS","modified_at":"2024-04-25T21:26:37.612295Z","published_at":"2022-05-24T17:15:19Z","references":["https://osv.dev/vulnerability/GHSA-592m-4533-rxq9","https://nvd.nist.gov/vuln/detail/CVE-2020-9280","https://github.com/silverstripe/silverstripe-assets/commit/6779fd3c8c1c05a3db5035bf6e541c9483d161fc","https://github.com/silverstripe/silverstripe-userforms/commit/3bbad2044279ade5e5a5d0ae1822bafe479f8a26","https://forum.silverstripe.org/c/releases","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/assets/CVE-2020-9280.yaml","https://github.com/silverstripe/silverstripe-framework","https://www.silverstripe.org/download/security-releases","https://www.silverstripe.org/download/security-releases/cve-2020-9280"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-592m-4533-rxq9","url":"https://osv.dev/vulnerability/GHSA-592m-4533-rxq9"}],"summary":"SilverStripe Folders migrated from 3.x may be unsafe to upload to"}