{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.15.1"}],"component":"redaxo/source","cve_ids":["CVE-2024-25298"],"ecosystem":"Packagist","epss":0.01108,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7f2v-5877-rx3x","id":"tcs_01M5KEXZY7NC3KG43S07MMC1MP","modified_at":"2024-04-11T16:37:20.664690Z","published_at":"2024-02-17T06:30:36Z","references":["https://osv.dev/vulnerability/GHSA-7f2v-5877-rx3x","https://nvd.nist.gov/vuln/detail/CVE-2024-25298","https://github.com/CpyRe/I-Find-CVE-2024/blob/main/REDAXO%20RCE.md","https://github.com/redaxo/redaxo"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-7f2v-5877-rx3x","url":"https://osv.dev/vulnerability/GHSA-7f2v-5877-rx3x"}],"summary":"Code injection in REDAXO"}