{"action":"No fix published. Pin and monitor.","affected":[],"component":"mautic/core","cve_ids":["CVE-2017-8874"],"ecosystem":"Packagist","epss":0.00761,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7vvh-xqq4-w777","id":"tcs_01M5KEYEB26ZECK8DR5S898NY0","modified_at":"2024-04-23T23:26:47.590565Z","published_at":"2022-05-13T01:12:01Z","references":["https://osv.dev/vulnerability/GHSA-7vvh-xqq4-w777","https://nvd.nist.gov/vuln/detail/CVE-2017-8874","https://github.com/mautic/mautic/issues/3486","https://github.com/mautic/mautic"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-7vvh-xqq4-w777","url":"https://osv.dev/vulnerability/GHSA-7vvh-xqq4-w777"}],"summary":"Mautic Cross-Site Request Forgery (CSRF)"}