{"action":"Upgrade bagisto/bagisto to 1.3.2 or later.","affected":[{"fixed":"1.3.2","introduced":"0"}],"component":"bagisto/bagisto","cve_ids":["CVE-2023-36237"],"ecosystem":"Packagist","epss":0.00393,"exploited":false,"fixed_versions":["1.3.2"],"ghsa_id":"GHSA-7p7q-fjfw-v3gf","id":"tcs_01M5KEY8VH0ACM85R1WVGP74AX","modified_at":"2024-08-02T10:57:18.863550Z","published_at":"2024-02-27T00:32:04Z","references":["https://osv.dev/vulnerability/GHSA-7p7q-fjfw-v3gf","https://nvd.nist.gov/vuln/detail/CVE-2023-36237","https://github.com/bagisto/bagisto/commit/265aa14db1490005fa4e0d6fe714835abb689813","https://github.com/Ek-Saini/security/blob/main/CSRF-Bagisto","https://github.com/bagisto/bagisto","https://github.com/bagisto/bagisto/commits/v1.3.2/?after=2dbb988388bc480af4bc8e880caed500772cfbc7+139"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-7p7q-fjfw-v3gf","url":"https://osv.dev/vulnerability/GHSA-7p7q-fjfw-v3gf"}],"summary":"Bagisto Cross-Site Request Forgery vulnerability"}