{"action":"Upgrade mautic/core to 4.4.12 or later.","affected":[{"fixed":"4.4.12","introduced":"3.3.0"},{"fixed":"5.0.4","introduced":"5.0.0-alpha"}],"component":"mautic/core","cve_ids":["CVE-2021-27916"],"ecosystem":"Packagist","epss":0.008,"exploited":false,"fixed_versions":["4.4.12","5.0.4"],"ghsa_id":"GHSA-9fcx-cv56-w58p","id":"tcs_01M5KF003EP0YE6M05SGPVX1Z0","modified_at":"2024-10-02T16:34:05.716204Z","published_at":"2024-04-12T17:07:12Z","references":["https://osv.dev/vulnerability/GHSA-9fcx-cv56-w58p","https://github.com/mautic/mautic/security/advisories/GHSA-9fcx-cv56-w58p","https://nvd.nist.gov/vuln/detail/CVE-2021-27916","https://github.com/mautic/mautic/commit/546045ff9c74dd8b3dac36c4ab3674380262c65a","https://github.com/mautic/mautic/commit/95e8df3ae6730c725f1848d70e7992da369518f3","https://github.com/mautic/mautic"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-9fcx-cv56-w58p","url":"https://osv.dev/vulnerability/GHSA-9fcx-cv56-w58p"}],"summary":"Mautic vulnerable to Relative Path Traversal / Arbitrary File Deletion due to GrapesJS builder"}