{"action":"Upgrade silverstripe/framework to 3.1.21 or later.","affected":[{"fixed":"3.1.21","introduced":"0"},{"fixed":"3.2.6","introduced":"3.2.0"},{"fixed":"3.3.4","introduced":"3.3.0"},{"fixed":"3.4.2","introduced":"3.4.0"}],"component":"silverstripe/framework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["3.1.21","3.2.6","3.3.4","3.4.2"],"ghsa_id":"GHSA-97jm-g33h-f46g","id":"tcs_01M5KEZSWQ21B9PCB67C5VY17F","modified_at":"2024-11-28T05:30:39.149432Z","published_at":"2024-05-23T19:50:27Z","references":["https://osv.dev/vulnerability/GHSA-97jm-g33h-f46g","https://github.com/silverstripe/silverstripe-framework/commit/8336cb96b9600dacafa8a525c92662345b52cfae","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2016-010-1.yaml","https://github.com/silverstripe/silverstripe-framework","https://www.silverstripe.org/download/security-releases/ss-2016-010"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-97jm-g33h-f46g","url":"https://osv.dev/vulnerability/GHSA-97jm-g33h-f46g"}],"summary":"silverstripe/framework ReadOnly transformation for formfields exploitable"}