{"action":"Upgrade getgrav/grav to 1.6.30 or later.","affected":[{"introduced":"1.7.0-beta.1","last_affected":"1.7.0-rc.17"},{"fixed":"1.6.30","introduced":"0"}],"component":"getgrav/grav","cve_ids":["CVE-2020-29553"],"ecosystem":"Packagist","epss":0.01361,"exploited":false,"fixed_versions":["1.6.30"],"ghsa_id":"GHSA-fqff-vcvx-68h3","id":"tcs_01M5KF1ZVKHTJ36CMAXGWXR9KR","modified_at":"2024-04-24T22:28:31.812265Z","published_at":"2022-05-24T17:44:32Z","references":["https://osv.dev/vulnerability/GHSA-fqff-vcvx-68h3","https://nvd.nist.gov/vuln/detail/CVE-2020-29553","https://blog.bssi.fr/cve-2020-29553-cve-2020-29555-cve-2020-29556-multiple-vulnerabilities-within-cms-grav","https://github.com/getgrav/grav"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-fqff-vcvx-68h3","url":"https://osv.dev/vulnerability/GHSA-fqff-vcvx-68h3"}],"summary":"Grav CMS Cross-Site Request Forgery (CSRF)"}