{"action":"Upgrade pimcore/pimcore to 10.5.18 or later.","affected":[{"fixed":"10.5.18","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2023-30855"],"ecosystem":"Packagist","epss":0.00795,"exploited":false,"fixed_versions":["10.5.18"],"ghsa_id":"GHSA-g2mc-fqqc-hxg3","id":"tcs_01M5KF26H7GNW44RAT0NXJACWD","modified_at":"2024-02-16T08:20:55.552420Z","published_at":"2023-05-02T16:43:08Z","references":["https://osv.dev/vulnerability/GHSA-g2mc-fqqc-hxg3","https://github.com/pimcore/pimcore/security/advisories/GHSA-g2mc-fqqc-hxg3","https://nvd.nist.gov/vuln/detail/CVE-2023-30855","https://github.com/pimcore/pimcore/pull/14498","https://github.com/pimcore/pimcore/commit/7f788fa44bc18bc1c9182c25e26b770a1d30b62f.patch","https://github.com/pimcore/pimcore/commit/f1d904094700b513c4756904fa2b1e19d08d890e.patch","https://github.com/pimcore/pimcore"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-g2mc-fqqc-hxg3","url":"https://osv.dev/vulnerability/GHSA-g2mc-fqqc-hxg3"}],"summary":"Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php"}