{"action":"Upgrade microweber/microweber to 1.3.2 or later.","affected":[{"fixed":"1.3.2","introduced":"0"}],"component":"microweber/microweber","cve_ids":["CVE-2022-4732"],"ecosystem":"Packagist","epss":0.38236,"exploited":false,"fixed_versions":["1.3.2"],"ghsa_id":"GHSA-8h43-xg5g-9cj7","id":"tcs_01M5KEZ1X19ZBCGK1JA5XKDT3G","modified_at":"2023-11-08T04:10:59.985682Z","published_at":"2022-12-27T15:30:19Z","references":["https://osv.dev/vulnerability/GHSA-8h43-xg5g-9cj7","https://nvd.nist.gov/vuln/detail/CVE-2022-4732","https://github.com/microweber/microweber/commit/0d279ac81052ce7ee97c18c811a9b8e912189da0","https://github.com/microweber/microweber","https://huntr.dev/bounties/d5be2e96-1f2f-4357-a385-e184cf0119aa"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-8h43-xg5g-9cj7","url":"https://osv.dev/vulnerability/GHSA-8h43-xg5g-9cj7"}],"summary":"Microweber vulnerable to unrestricted malicious uploads"}