{"action":"Upgrade phpxmlrpc/phpxmlrpc to 4.9.0 or later.","affected":[{"fixed":"4.9.0","introduced":"0"}],"component":"phpxmlrpc/phpxmlrpc","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["4.9.0"],"ghsa_id":"GHSA-7vcx-v65q-9wpg","id":"tcs_01M5KEYDQEMHFAVVKP16RBBGXB","modified_at":"2024-11-28T05:37:14.351861Z","published_at":"2023-01-11T23:53:34Z","references":["https://osv.dev/vulnerability/GHSA-7vcx-v65q-9wpg","https://github.com/gggeek/phpxmlrpc/security/advisories/GHSA-7vcx-v65q-9wpg","https://github.com/gggeek/phpxmlrpc/issues/80","https://github.com/gggeek/phpxmlrpc/commit/cf6e605e09d001ce520bfa8e7b168cfa514e663b","https://github.com/gggeek/phpxmlrpc"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-7vcx-v65q-9wpg","url":"https://osv.dev/vulnerability/GHSA-7vcx-v65q-9wpg"}],"summary":"XML-RPC for PHP's `Wrapper::buildClientWrapperCode` method allows code injection via malicious `$client` argument"}