{"action":"Upgrade sylius/resource-bundle to 1.0.17 or later.","affected":[{"fixed":"1.0.17","introduced":"1.0.0"},{"fixed":"1.1.9","introduced":"1.1.0"},{"fixed":"1.2.2","introduced":"1.2.0"}],"component":"sylius/resource-bundle","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.0.17","1.1.9","1.2.2"],"ghsa_id":"GHSA-65v7-wg35-2qpm","id":"tcs_01M5KEWPFFGS9JEJSEEW57PTJV","modified_at":"2024-12-04T05:39:55.172615Z","published_at":"2024-05-29T18:50:22Z","references":["https://osv.dev/vulnerability/GHSA-65v7-wg35-2qpm","https://github.com/Sylius/SyliusResourceBundle/commit/9720ac5a0a39ea2c2a395ef16a94a00aa86c418b","https://github.com/FriendsOfPHP/security-advisories/blob/master/sylius/sylius/2018-07-09.yaml","https://github.com/Sylius/SyliusResourceBundle","https://sylius.com/blog/csrf-vulnerability-in-admin-panel"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-65v7-wg35-2qpm","url":"https://osv.dev/vulnerability/GHSA-65v7-wg35-2qpm"}],"summary":"Sylius Resource Bundle Cross-Site Request Forgery vulnerability"}