{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.7.21"}],"component":"dweeves/magmi","cve_ids":["CVE-2015-2067"],"ecosystem":"Packagist","epss":0.3846,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-c252-xc8v-mqmm","id":"tcs_01M5KF0E01VP8WX9PFRBZNMC5M","modified_at":"2024-12-03T06:08:26.730139Z","published_at":"2022-05-13T01:25:27Z","references":["https://osv.dev/vulnerability/GHSA-c252-xc8v-mqmm","https://nvd.nist.gov/vuln/detail/CVE-2015-2067","https://github.com/dweeves/magmi-git","https://web.archive.org/web/20210122162452/http://www.securityfocus.com/bid/74881","http://packetstormsecurity.com/files/130250/Magento-Server-MAGMI-Cross-Site-Scripting-Local-File-Inclusion.html","http://www.exploit-db.com/exploits/35996"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-c252-xc8v-mqmm","url":"https://osv.dev/vulnerability/GHSA-c252-xc8v-mqmm"}],"summary":"MAGMI plugin for Magento Server Directory Traversal"}