{"action":"Upgrade ezsystems/ezplatform-rest to 1.2.2.1 or later.","affected":[{"fixed":"1.2.2.1","introduced":"1.2.0"},{"fixed":"1.3.1.1","introduced":"1.3.0"}],"component":"ezsystems/ezplatform-rest","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.2.2.1","1.3.1.1"],"ghsa_id":"GHSA-7vwg-39h8-8qp8","id":"tcs_01M5KEYEKNRGQVW6DDV909TB41","modified_at":"2024-12-02T05:41:28.326731Z","published_at":"2021-03-11T17:42:01Z","references":["https://osv.dev/vulnerability/GHSA-7vwg-39h8-8qp8","https://github.com/ezsystems/ezplatform-rest/security/advisories/GHSA-7vwg-39h8-8qp8","https://github.com/ezsystems/ezplatform-rest/commit/e239bba8b154a3b4cf787e29b9f15edf8945d933","https://packagist.org/packages/ezsystems/ezplatform-rest"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-7vwg-39h8-8qp8","url":"https://osv.dev/vulnerability/GHSA-7vwg-39h8-8qp8"}],"summary":"/user/sessions endpoint allows detecting valid accounts"}