{"action":"Upgrade phpsysinfo/phpsysinfo to 3.4.3 or later.","affected":[{"fixed":"3.4.3","introduced":"0"}],"component":"phpsysinfo/phpsysinfo","cve_ids":["CVE-2023-49006"],"ecosystem":"Packagist","epss":0.00524,"exploited":false,"fixed_versions":["3.4.3"],"ghsa_id":"GHSA-67gv-xrw7-p72w","id":"tcs_01M5KEWTE5FB7GJWCCFNWCBYBJ","modified_at":"2024-02-20T05:34:39.259696Z","published_at":"2023-12-19T12:30:19Z","references":["https://osv.dev/vulnerability/GHSA-67gv-xrw7-p72w","https://nvd.nist.gov/vuln/detail/CVE-2023-49006","https://github.com/Hebing123/cve/issues/5","https://github.com/phpsysinfo/phpsysinfo/commit/4f2cee505e4f2e9b369a321063ff2c5e0c34ba45","https://github.com/phpsysinfo/phpsysinfo","https://huntr.com/bounties/ca6d669f-fd82-4188-aae2-69e08740d982"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-67gv-xrw7-p72w","url":"https://osv.dev/vulnerability/GHSA-67gv-xrw7-p72w"}],"summary":"Phpsysinfo Cross Site Request Forgery (CSRF) vulnerability"}