{"action":"Upgrade ec-cube/ec-cube to 3.0.17 or later.","affected":[{"fixed":"3.0.17","introduced":"3.0.0"}],"component":"ec-cube/ec-cube","cve_ids":["CVE-2018-16191"],"ecosystem":"Packagist","epss":0.01297,"exploited":false,"fixed_versions":["3.0.17"],"ghsa_id":"GHSA-fcgg-qgxg-2g2x","id":"tcs_01M5KF1PQ3YVRKVVH9QGS6FNNP","modified_at":"2024-09-13T19:47:55.494135Z","published_at":"2022-05-14T01:36:14Z","references":["https://osv.dev/vulnerability/GHSA-fcgg-qgxg-2g2x","https://nvd.nist.gov/vuln/detail/CVE-2018-16191","https://github.com/EC-CUBE/ec-cube","https://jvn.jp/en/jp/JVN25359688/index.html","https://www.ec-cube.net/info/weakness/20181113","http://www.securityfocus.com/bid/106545"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-fcgg-qgxg-2g2x","url":"https://osv.dev/vulnerability/GHSA-fcgg-qgxg-2g2x"}],"summary":"EC-CUBE Open redirect vulnerability"}