{"action":"Upgrade getgrav/grav to 1.7.21 or later.","affected":[{"fixed":"1.7.21","introduced":"0"}],"component":"getgrav/grav","cve_ids":["CVE-2021-3818"],"ecosystem":"Packagist","epss":0.02452,"exploited":false,"fixed_versions":["1.7.21"],"ghsa_id":"GHSA-cg3q-59w7-rvc2","id":"tcs_01M5KF0Y2ZVK88264GKWQC3Z89","modified_at":"2023-11-08T04:06:25.555067Z","published_at":"2021-09-29T17:12:51Z","references":["https://osv.dev/vulnerability/GHSA-cg3q-59w7-rvc2","https://github.com/getgrav/grav/commit/c51fb1779b83f620c0b6f3548d4a96322b55df07","https://github.com/getgrav/grav","https://huntr.dev/bounties/c2bc65af-7b93-4020-886e-8cdaeb0a58ea"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-cg3q-59w7-rvc2","url":"https://osv.dev/vulnerability/GHSA-cg3q-59w7-rvc2"}],"summary":"Reliance on Cookies without Validation and Integrity Checking in getgrav/grav"}