{"action":"Upgrade pimcore/pimcore to 10.5.16 or later.","affected":[{"fixed":"10.5.16","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2023-23937"],"ecosystem":"Packagist","epss":0.00476,"exploited":false,"fixed_versions":["10.5.16"],"ghsa_id":"GHSA-8xv4-jj4h-qww6","id":"tcs_01M5KEZFZQZ5GXFVQJ1ACX800G","modified_at":"2024-02-16T08:08:10.824187Z","published_at":"2023-02-02T17:00:19Z","references":["https://osv.dev/vulnerability/GHSA-8xv4-jj4h-qww6","https://github.com/pimcore/pimcore/security/advisories/GHSA-8xv4-jj4h-qww6","https://nvd.nist.gov/vuln/detail/CVE-2023-23937","https://github.com/pimcore/pimcore/pull/14125","https://github.com/pimcore/pimcore/commit/75a448ef8ac74424cf4e723afeb6d05f9eed872f","https://github.com/pimcore/pimcore","https://huntr.dev/bounties/aa7ee076-d729-4fcc-9bcc-48bcbb8eac38"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-8xv4-jj4h-qww6","url":"https://osv.dev/vulnerability/GHSA-8xv4-jj4h-qww6"}],"summary":"Pimcore contains Unrestricted Upload of File with Dangerous Type"}