{"action":"Upgrade thinkcmf/thinkcmf to 6.0.8 or later.","affected":[{"fixed":"6.0.8","introduced":"0"}],"component":"thinkcmf/thinkcmf","cve_ids":["CVE-2020-18151"],"ecosystem":"Packagist","epss":0.00473,"exploited":false,"fixed_versions":["6.0.8"],"ghsa_id":"GHSA-842m-vp3r-qwwr","id":"tcs_01M5KEYMCY4W3PFTSYKHAEVVAZ","modified_at":"2024-04-25T21:12:10.992644Z","published_at":"2022-05-24T19:07:48Z","references":["https://osv.dev/vulnerability/GHSA-842m-vp3r-qwwr","https://nvd.nist.gov/vuln/detail/CVE-2020-18151","https://github.com/thinkcmf/thinkcmf/issues/580","https://github.com/thinkcmf/thinkcmf/issues/736","https://github.com/thinkcmf/thinkcmf/commit/321faa20865e74540e5f0a63e4c3f4ea75093d59","https://github.com/thinkcmf/thinkcmf/commit/b61636134aa57d4693967f35772200c779099740","https://github.com/thinkcmf/thinkcmf"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-842m-vp3r-qwwr","url":"https://osv.dev/vulnerability/GHSA-842m-vp3r-qwwr"}],"summary":"ThinkCMF Cross Site Request Forgerly (CSRF) vulnerability"}