{"action":"Upgrade froxlor/froxlor to 2.0.0-beta1 or later.","affected":[{"fixed":"2.0.0-beta1","introduced":"2.0.0-beta0"}],"component":"froxlor/froxlor","cve_ids":["CVE-2022-4867"],"ecosystem":"Packagist","epss":0.00356,"exploited":false,"fixed_versions":["2.0.0-beta1"],"ghsa_id":"GHSA-6gwx-gw56-qhf7","id":"tcs_01M5KEX2Q3YY2NWBTXY5HH6JKZ","modified_at":"2023-11-08T04:11:04.469475Z","published_at":"2022-12-31T09:30:42Z","references":["https://osv.dev/vulnerability/GHSA-6gwx-gw56-qhf7","https://nvd.nist.gov/vuln/detail/CVE-2022-4867","https://github.com/froxlor/froxlor/commit/f7f356e896173558248c43f4f68612f78e73a65d","https://github.com/froxlor/froxlor","https://huntr.dev/bounties/c91364dd-9ead-4bf3-96e6-663a017e08fa"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-6gwx-gw56-qhf7","url":"https://osv.dev/vulnerability/GHSA-6gwx-gw56-qhf7"}],"summary":"Froxlor vulnerable to Cross-Site Request Forgery"}