{"action":"Upgrade forkcms/forkcms to 5.9.3 or later.","affected":[{"fixed":"5.9.3","introduced":"0"}],"component":"forkcms/forkcms","cve_ids":["CVE-2021-28931"],"ecosystem":"Packagist","epss":0.0121,"exploited":false,"fixed_versions":["5.9.3"],"ghsa_id":"GHSA-748f-wv76-x9hg","id":"tcs_01M5KEXNT6WSTVX0Y75ZRFF0HB","modified_at":"2023-11-08T04:05:32.057899Z","published_at":"2021-09-08T17:26:26Z","references":["https://osv.dev/vulnerability/GHSA-748f-wv76-x9hg","https://nvd.nist.gov/vuln/detail/CVE-2021-28931","https://github.com/forkcms/forkcms/pull/3351","https://github.com/bousalman/ForkCMS-arbitrary-upload/blob/main/README.md","https://github.com/forkcms/forkcms/releases/tag/5.9.2"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-748f-wv76-x9hg","url":"https://osv.dev/vulnerability/GHSA-748f-wv76-x9hg"}],"summary":"Arbitrary file upload in Fork CMS"}