{"action":"Upgrade silverstripe/assets to 1.4.7 or later.","affected":[{"fixed":"1.4.7","introduced":"1.0.0"},{"fixed":"1.5.2","introduced":"1.5.0"}],"component":"silverstripe/assets","cve_ids":["CVE-2020-9280"],"ecosystem":"Packagist","epss":0.01729,"exploited":false,"fixed_versions":["1.4.7","1.5.2"],"ghsa_id":"GHSA-592m-4533-rxq9","id":"tcs_01M5KEVTTJG0FQW01SN1ZNAAMX","modified_at":"2024-04-25T21:26:37.612295Z","published_at":"2022-05-24T17:15:19Z","references":["https://osv.dev/vulnerability/GHSA-592m-4533-rxq9","https://nvd.nist.gov/vuln/detail/CVE-2020-9280","https://github.com/silverstripe/silverstripe-assets/commit/6779fd3c8c1c05a3db5035bf6e541c9483d161fc","https://github.com/silverstripe/silverstripe-userforms/commit/3bbad2044279ade5e5a5d0ae1822bafe479f8a26","https://forum.silverstripe.org/c/releases","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/assets/CVE-2020-9280.yaml","https://github.com/silverstripe/silverstripe-framework","https://www.silverstripe.org/download/security-releases","https://www.silverstripe.org/download/security-releases/cve-2020-9280"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-592m-4533-rxq9#Packagist/silverstripe/assets","url":"https://osv.dev/vulnerability/GHSA-592m-4533-rxq9"}],"summary":"SilverStripe Folders migrated from 3.x may be unsafe to upload to"}