{"action":"Upgrade froxlor/froxlor to 2.0.22 or later.","affected":[{"fixed":"2.0.22","introduced":"0"}],"component":"froxlor/froxlor","cve_ids":["CVE-2023-4304"],"ecosystem":"Packagist","epss":0.00591,"exploited":false,"fixed_versions":["2.0.22"],"ghsa_id":"GHSA-9rmf-6qgj-g3wj","id":"tcs_01M5KF09GYE3JKPCT36H7V9Q77","modified_at":"2024-02-16T08:21:04.109020Z","published_at":"2023-08-11T03:30:19Z","references":["https://osv.dev/vulnerability/GHSA-9rmf-6qgj-g3wj","https://nvd.nist.gov/vuln/detail/CVE-2023-4304","https://github.com/froxlor/froxlor/commit/ce9a5f97a3edb30c7d33878765d3c014a6583597","https://github.com/Froxlor/Froxlor","https://huntr.dev/bounties/59fe5037-b253-4b0f-be69-1d2e4af8b4a9"],"severity":{"label":"low","score":3.8},"sources":[{"source":"osv","source_id":"GHSA-9rmf-6qgj-g3wj","url":"https://osv.dev/vulnerability/GHSA-9rmf-6qgj-g3wj"}],"summary":"Froxlor vulnerable to business logic errors"}