{"action":"Upgrade october/october to 1.0.413 or later.","affected":[{"fixed":"1.0.413","introduced":"0"}],"component":"october/october","cve_ids":["CVE-2017-1000194"],"ecosystem":"Packagist","epss":0.01237,"exploited":false,"fixed_versions":["1.0.413"],"ghsa_id":"GHSA-8vh6-8w76-v6m3","id":"tcs_01M5KEZBK36EZZ6XV0ECWRJF1E","modified_at":"2024-02-16T08:10:15.024341Z","published_at":"2022-05-13T01:24:44Z","references":["https://osv.dev/vulnerability/GHSA-8vh6-8w76-v6m3","https://nvd.nist.gov/vuln/detail/CVE-2017-1000194","https://github.com/octobercms/october","https://github.com/octobercms/october/compare/v1.0.412...v1.0.413#diff-c328b7b99eac0d17b3c71eb37038fd61R224"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-8vh6-8w76-v6m3","url":"https://osv.dev/vulnerability/GHSA-8vh6-8w76-v6m3"}],"summary":"October CMS File Upload Vulnerability"}