{"action":"Upgrade silverstripe/framework to 3.1.17 or later.","affected":[{"fixed":"3.1.17","introduced":"0"},{"fixed":"3.2.2","introduced":"3.2.0"},{"fixed":"3.3.0","introduced":"3.3.0-beta1"}],"component":"silverstripe/framework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["3.1.17","3.2.2","3.3.0"],"ghsa_id":"GHSA-87pf-7x99-5xc4","id":"tcs_01M5KEYSQP2RKSDPF16EYWS9N2","modified_at":"2024-11-28T05:40:22.033023Z","published_at":"2024-05-23T19:27:33Z","references":["https://osv.dev/vulnerability/GHSA-87pf-7x99-5xc4","https://github.com/silverstripe/silverstripe-framework/commit/37059eb6b3546f304e9c031abca0f096ddb175c6","https://github.com/silverstripe/silverstripe-framework/commit/893e49703de4aa1855b5364919cbb0826f754fbf","https://github.com/silverstripe/silverstripe-framework/commit/faa94d51d570788dcebc2f2ef6e9de4d179ce1e4","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2016-003-1.yaml","https://github.com/silverstripe/silverstripe-framework","https://www.silverstripe.org/download/security-releases/ss-2016-003"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-87pf-7x99-5xc4","url":"https://osv.dev/vulnerability/GHSA-87pf-7x99-5xc4"}],"summary":"Silverstripe Hostname, IP and Protocol Spoofing through HTTP Headers"}