{"action":"Upgrade nukeviet/nukeviet to 4.3.08 or later.","affected":[{"fixed":"4.3.08","introduced":"4.0.10"}],"component":"nukeviet/nukeviet","cve_ids":["CVE-2020-21808"],"ecosystem":"Packagist","epss":0.01583,"exploited":false,"fixed_versions":["4.3.08"],"ghsa_id":"GHSA-84gf-rw24-pfqg","id":"tcs_01M5KEYMQ3WEJQ120E6PGG23XC","modified_at":"2024-04-24T20:13:32.802494Z","published_at":"2022-05-24T19:09:25Z","references":["https://osv.dev/vulnerability/GHSA-84gf-rw24-pfqg","https://nvd.nist.gov/vuln/detail/CVE-2020-21808","https://github.com/nukeviet/nukeviet","https://github.com/nukeviet/nukeviet/blob/4.3.08/CHANGELOG.txt#L11","https://nukeviet.vn/vi/news/Tin-an-ninh/huong-dan-fix-loi-bao-mat-nukeviet-4-va-module-shops-612.html","https://whitehub.net/submissions/1516"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-84gf-rw24-pfqg","url":"https://osv.dev/vulnerability/GHSA-84gf-rw24-pfqg"}],"summary":"NukeViet SQL Injection vulnerability via topicsid parameter"}