{"action":"Upgrade thinkcmf/thinkcmf to 6.0.8 or later.","affected":[{"fixed":"6.0.8","introduced":"0"}],"component":"thinkcmf/thinkcmf","cve_ids":["CVE-2022-40489"],"ecosystem":"Packagist","epss":0.0036,"exploited":false,"fixed_versions":["6.0.8"],"ghsa_id":"GHSA-6xw3-cpqj-8mxr","id":"tcs_01M5KEXH6203D14PX9P7QH15MR","modified_at":"2024-04-25T21:12:11.075112Z","published_at":"2022-12-01T06:30:26Z","references":["https://osv.dev/vulnerability/GHSA-6xw3-cpqj-8mxr","https://nvd.nist.gov/vuln/detail/CVE-2022-40489","https://github.com/thinkcmf/thinkcmf/issues/736","https://github.com/thinkcmf/thinkcmf/commit/321faa20865e74540e5f0a63e4c3f4ea75093d59","https://github.com/thinkcmf/thinkcmf/commit/b61636134aa57d4693967f35772200c779099740","https://github.com/thinkcmf/thinkcmf"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-6xw3-cpqj-8mxr","url":"https://osv.dev/vulnerability/GHSA-6xw3-cpqj-8mxr"}],"summary":"ThinkCMF Cross Site Request Forgery (CSRF) vulnerability"}