{"action":"Upgrade ezsystems/ezpublish-legacy to 5.3.12.2 or later.","affected":[{"fixed":"2017.8.1.1","introduced":"2011.0.0"},{"fixed":"5.4.10.1","introduced":"5.4.0"},{"fixed":"5.3.12.2","introduced":"5.3.0"}],"component":"ezsystems/ezpublish-legacy","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2017.8.1.1","5.4.10.1","5.3.12.2"],"ghsa_id":"GHSA-cc2j-92jq-wgjg","id":"tcs_01M5KF0VY3TA0WVTWCXNY4FPPC","modified_at":"2024-11-29T05:41:44.906496Z","published_at":"2024-05-15T21:21:09Z","references":["https://osv.dev/vulnerability/GHSA-cc2j-92jq-wgjg","https://github.com/ezsystems/ezpublish-legacy/commit/a4a0470f8d80f012fe14e4f8ab11c7d14375986c","https://github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezpublish-legacy/2017-09-11-1.yaml","https://github.com/ezsystems/ezpublish-legacy","http://share.ez.no/community-project/security-advisories/ezsa-2017-006-information-disclosure-in-backend-content-tree-menu"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-cc2j-92jq-wgjg","url":"https://osv.dev/vulnerability/GHSA-cc2j-92jq-wgjg"}],"summary":"eZ Publish Information disclosure in backend content tree menu"}