{"action":"Upgrade silverstripe/userforms to 5.4.2 or later.","affected":[{"fixed":"5.4.2","introduced":"5.0.0"}],"component":"silverstripe/userforms","cve_ids":["CVE-2020-9280"],"ecosystem":"Packagist","epss":0.01729,"exploited":false,"fixed_versions":["5.4.2"],"ghsa_id":"GHSA-592m-4533-rxq9","id":"tcs_01M5KEVTRFJ0DCWRKJ67JS0SAB","modified_at":"2024-04-25T21:26:37.612295Z","published_at":"2022-05-24T17:15:19Z","references":["https://osv.dev/vulnerability/GHSA-592m-4533-rxq9","https://nvd.nist.gov/vuln/detail/CVE-2020-9280","https://github.com/silverstripe/silverstripe-assets/commit/6779fd3c8c1c05a3db5035bf6e541c9483d161fc","https://github.com/silverstripe/silverstripe-userforms/commit/3bbad2044279ade5e5a5d0ae1822bafe479f8a26","https://forum.silverstripe.org/c/releases","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/assets/CVE-2020-9280.yaml","https://github.com/silverstripe/silverstripe-framework","https://www.silverstripe.org/download/security-releases","https://www.silverstripe.org/download/security-releases/cve-2020-9280"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-592m-4533-rxq9#Packagist/silverstripe/userforms","url":"https://osv.dev/vulnerability/GHSA-592m-4533-rxq9"}],"summary":"SilverStripe Folders migrated from 3.x may be unsafe to upload to"}