{"action":"Upgrade silverstripe/graphql to 2.0.5 or later.","affected":[{"fixed":"2.0.5","introduced":"2.0.0"},{"fixed":"3.1.2","introduced":"3.1.0"}],"component":"silverstripe/graphql","cve_ids":["CVE-2019-12437"],"ecosystem":"Packagist","epss":0.00742,"exploited":false,"fixed_versions":["2.0.5","3.1.2"],"ghsa_id":"GHSA-fx37-56v6-85q6","id":"tcs_01M5KF24FN7C5XAJ3K8Q9HCBJR","modified_at":"2024-02-16T08:10:25.934408Z","published_at":"2022-05-24T17:09:19Z","references":["https://osv.dev/vulnerability/GHSA-fx37-56v6-85q6","https://nvd.nist.gov/vuln/detail/CVE-2019-12437","https://github.com/silverstripe/silverstripe-graphql/commit/3c1dd6b839b7c0e2cbc85074bb5840ebded6097c","https://github.com/silverstripe/silverstripe-graphql/commit/db28f3075ae2335905f43ac808e9177497e354ff","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/graphql/CVE-2019-12437.yaml","https://github.com/silverstripe/silverstripe-graphql","https://www.silverstripe.org/download/security-releases/cve-2019-12437"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-fx37-56v6-85q6","url":"https://osv.dev/vulnerability/GHSA-fx37-56v6-85q6"}],"summary":"Silverstripe CSRF Protection Bypass via GraphQL"}