{"action":"Upgrade cakephp/cakephp to 2.1.5 or later.","affected":[{"fixed":"2.1.5","introduced":"2.1.0-alpha"},{"fixed":"2.2.1","introduced":"2.2.0-beta"}],"component":"cakephp/cakephp","cve_ids":["CVE-2012-4399"],"ecosystem":"Packagist","epss":0.12091,"exploited":false,"fixed_versions":["2.1.5","2.2.1"],"ghsa_id":"GHSA-5964-pq8r-4q62","id":"tcs_01M5KEVVGG0D7ACCHXD6SJZ5PZ","modified_at":"2024-04-09T14:17:43Z","published_at":"2022-05-17T05:07:14Z","references":["https://osv.dev/vulnerability/GHSA-5964-pq8r-4q62","https://nvd.nist.gov/vuln/detail/CVE-2012-4399","https://github.com/cakephp/cakephp","http://bakery.cakephp.org/articles/markstory/2012/07/14/security_release_-_cakephp_2_1_5_2_2_1","http://seclists.org/bugtraq/2012/Jul/101","http://secunia.com/advisories/49900","http://www.exploit-db.com/exploits/19863","http://www.openwall.com/lists/oss-security/2012/09/03/1","http://www.openwall.com/lists/oss-security/2012/09/03/2","http://www.osvdb.org/84042"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-5964-pq8r-4q62","url":"https://osv.dev/vulnerability/GHSA-5964-pq8r-4q62"}],"summary":"CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references"}