{"action":"Upgrade ezsystems/ezpublish-legacy to 5.3.12.3 or later.","affected":[{"fixed":"2017.12.2.1","introduced":"2011.0.0"},{"fixed":"5.4.11.3","introduced":"5.4.0"},{"fixed":"5.3.12.3","introduced":"5.3.0"}],"component":"ezsystems/ezpublish-legacy","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2017.12.2.1","5.4.11.3","5.3.12.3"],"ghsa_id":"GHSA-82rv-45pc-v28w","id":"tcs_01M5KEYJGZB7AZ2RJ6SBK1Z4WB","modified_at":"2024-11-29T05:40:34.589155Z","published_at":"2024-05-15T21:22:03Z","references":["https://osv.dev/vulnerability/GHSA-82rv-45pc-v28w","https://github.com/ezsystems/ezpublish-legacy/commit/6db0e6b7739481f27d954548388bd3f0ed2c6fdd","https://github.com/ezsystems/ezpublish-legacy/commit/917711eb7ffe2b52a3e9fe12505f6810a63696f7","https://github.com/ezsystems/ezpublish-legacy/commit/efcd2b61b15eaaf74e0ff28d6c723cf28e655dab","https://github.com/ezsystems/ezpublish-legacy/commit/f9ffaf590b63b4f552142cfd4441afbbfb3f19b1","https://github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezpublish-legacy/2018-02-26-1.yaml","https://github.com/ezsystems/ezpublish-legacy","https://web.archive.org/web/20210614192631/http://share.ez.no/community-project/security-advisories/ezsa-2018-001-several-vulnerabilities-in-forgot-password-information-collector-xml-text-and-matrix-field-type-features"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-82rv-45pc-v28w","url":"https://osv.dev/vulnerability/GHSA-82rv-45pc-v28w"}],"summary":"eZ Publish Legacy Patch EZSA-2018-001 for Several vulnerabilities"}