{"action":"Upgrade contao/core to 2.11.4 or later.","affected":[{"fixed":"2.11.4","introduced":"0"}],"component":"contao/core","cve_ids":["CVE-2012-4383"],"ecosystem":"Packagist","epss":0.00919,"exploited":false,"fixed_versions":["2.11.4"],"ghsa_id":"GHSA-9jq2-jvwc-p52f","id":"tcs_01M5KF04TVXNCKMZD911STW270","modified_at":"2024-04-25T23:28:37.737584Z","published_at":"2022-04-23T00:40:39Z","references":["https://osv.dev/vulnerability/GHSA-9jq2-jvwc-p52f","https://nvd.nist.gov/vuln/detail/CVE-2012-4383","https://github.com/contao/core/issues/4427","https://github.com/contao/core/commit/2bf4fc380e19895127cbeaba62bff951a3b8e5cb","https://github.com/contao/core","http://www.openwall.com/lists/oss-security/2012/08/31/14"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-9jq2-jvwc-p52f","url":"https://osv.dev/vulnerability/GHSA-9jq2-jvwc-p52f"}],"summary":"Contao core SQL Injection Vulnerability"}