{"action":"Upgrade dolibarr/dolibarr to 14.0.0 or later.","affected":[{"fixed":"14.0.0","introduced":"0"}],"component":"dolibarr/dolibarr","cve_ids":["CVE-2021-25957"],"ecosystem":"Packagist","epss":0.01058,"exploited":false,"fixed_versions":["14.0.0"],"ghsa_id":"GHSA-c32w-3cqh-f6jx","id":"tcs_01M5KF0FPX2D4SMVGT1WFEGYEM","modified_at":"2023-11-08T04:05:18.694149Z","published_at":"2021-09-02T17:08:33Z","references":["https://osv.dev/vulnerability/GHSA-c32w-3cqh-f6jx","https://nvd.nist.gov/vuln/detail/CVE-2021-25957","https://github.com/Dolibarr/dolibarr/commit/87f9530272925f0d651f59337a35661faeb6f377","https://github.com/Dolibarr/dolibarr","https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25957"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-c32w-3cqh-f6jx","url":"https://osv.dev/vulnerability/GHSA-c32w-3cqh-f6jx"}],"summary":"Weak Password Recovery Mechanism for Forgotten Password"}