{"action":"Upgrade oro/platform to 5.0.8 or later.","affected":[{"introduced":"4.1.0","last_affected":"4.1.13"},{"introduced":"4.2.0","last_affected":"4.2.10"},{"fixed":"5.0.8","introduced":"5.0.0"}],"component":"oro/platform","cve_ids":["CVE-2022-41951"],"ecosystem":"Packagist","epss":0.00946,"exploited":false,"fixed_versions":["5.0.8"],"ghsa_id":"GHSA-9v3j-4j64-p937","id":"tcs_01M5KF09XPEG2DVW1ACVAAEY0B","modified_at":"2024-02-16T08:15:01.929951Z","published_at":"2023-11-27T23:28:52Z","references":["https://osv.dev/vulnerability/GHSA-9v3j-4j64-p937","https://github.com/oroinc/platform/security/advisories/GHSA-9v3j-4j64-p937","https://nvd.nist.gov/vuln/detail/CVE-2022-41951","https://github.com/oroinc/platform"],"severity":{"label":"high","score":8.5},"sources":[{"source":"osv","source_id":"GHSA-9v3j-4j64-p937","url":"https://osv.dev/vulnerability/GHSA-9v3j-4j64-p937"}],"summary":"OroPlatform vulnerable to path traversal during temporary file manipulations"}