{"action":"Upgrade silverstripe/framework to 3.1.19 or later.","affected":[{"fixed":"3.1.19","introduced":"3.1.18"},{"fixed":"3.2.4","introduced":"3.2.3"},{"fixed":"3.3.2","introduced":"3.3.1"}],"component":"silverstripe/framework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["3.1.19","3.2.4","3.3.2"],"ghsa_id":"GHSA-8v6m-7f5v-hhx6","id":"tcs_01M5KEZAH2K16WHZ1TFTMJZP0E","modified_at":"2024-11-28T05:41:09.528113Z","published_at":"2024-05-23T19:37:11Z","references":["https://osv.dev/vulnerability/GHSA-8v6m-7f5v-hhx6","https://github.com/silverstripe/silverstripe-framework/commit/f32c893546340c8c279fd1ab6d4269e9d6539bc2","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2016-005-1.yaml","https://github.com/silverstripe/silverstripe-framework","https://www.silverstripe.org/download/security-releases/ss-2016-005"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-8v6m-7f5v-hhx6","url":"https://osv.dev/vulnerability/GHSA-8v6m-7f5v-hhx6"}],"summary":"Silverstripe Brute force bypass on default admin"}