{"action":"Upgrade kimai/kimai to 2.1.0 or later.","affected":[{"fixed":"2.1.0","introduced":"0"}],"component":"kimai/kimai","cve_ids":["CVE-2023-46245"],"ecosystem":"Packagist","epss":0.01466,"exploited":false,"fixed_versions":["2.1.0"],"ghsa_id":"GHSA-fjhg-96cp-6fcw","id":"tcs_01M5KF1VZM8SHP1V2M6Q2FHMV6","modified_at":"2024-02-16T08:24:23.918986Z","published_at":"2023-10-30T15:40:04Z","references":["https://osv.dev/vulnerability/GHSA-fjhg-96cp-6fcw","https://github.com/kimai/kimai/security/advisories/GHSA-fjhg-96cp-6fcw","https://nvd.nist.gov/vuln/detail/CVE-2023-46245","https://github.com/kimai/kimai/commit/38e37f1c2e91e1acb221ec5c13f11b735bd50ae4","https://github.com/kimai/kimai"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-fjhg-96cp-6fcw","url":"https://osv.dev/vulnerability/GHSA-fjhg-96cp-6fcw"}],"summary":"Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File"}