{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.1.27.36"}],"component":"nilsteampassnet/teampass","cve_ids":["CVE-2020-12479"],"ecosystem":"Packagist","epss":0.02575,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6jf9-8m34-96w5","id":"tcs_01M5KEX55RESFXF5DA29DJVX39","modified_at":"2024-04-24T22:56:42.087265Z","published_at":"2022-05-24T17:16:59Z","references":["https://osv.dev/vulnerability/GHSA-6jf9-8m34-96w5","https://nvd.nist.gov/vuln/detail/CVE-2020-12479","https://github.com/nilsteampassnet/TeamPass/issues/2762","https://github.com/nilsteampassnet/TeamPass/pull/2874","https://github.com/nilsteampassnet/TeamPass"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-6jf9-8m34-96w5","url":"https://osv.dev/vulnerability/GHSA-6jf9-8m34-96w5"}],"summary":"TeamPass PHP arbitrary file include vulnerability"}