{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"6.3.0"}],"component":"yetiforce/yetiforce-crm","cve_ids":["CVE-2022-0269"],"ecosystem":"Packagist","epss":0.00531,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7g7r-gr46-q4p5","id":"tcs_01M5KEY26PJGQWWYJC3M3SC1MQ","modified_at":"2024-02-16T08:20:57.255108Z","published_at":"2022-01-27T16:21:33Z","references":["https://osv.dev/vulnerability/GHSA-7g7r-gr46-q4p5","https://nvd.nist.gov/vuln/detail/CVE-2022-0269","https://github.com/yetiforcecompany/yetiforcecrm/commit/298c7870e6fe4332d8aa1757a9c8d79f841389ff","https://github.com/yetiforcecompany/yetiforcecrm","https://huntr.dev/bounties/a0470915-f6df-45b8-b3a2-01aebe764df0"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-7g7r-gr46-q4p5","url":"https://osv.dev/vulnerability/GHSA-7g7r-gr46-q4p5"}],"summary":"Cross-Site Request Forgery in yetiforce"}