{"action":"Upgrade dweeves/magmi to 0.7.24 or later.","affected":[{"fixed":"0.7.24","introduced":"0"}],"component":"dweeves/magmi","cve_ids":["CVE-2020-5777"],"ecosystem":"Packagist","epss":0.23303,"exploited":false,"fixed_versions":["0.7.24"],"ghsa_id":"GHSA-g475-pch5-6wvv","id":"tcs_01M5KF29W6BMTRG9BRN9SY1A80","modified_at":"2023-11-08T04:03:56.383005Z","published_at":"2021-05-06T18:54:35Z","references":["https://osv.dev/vulnerability/GHSA-g475-pch5-6wvv","https://nvd.nist.gov/vuln/detail/CVE-2020-5777","https://github.com/dweeves/magmi-git/commit/dde71de5cfd505fe78e5caf21d6531b61450a16f","https://www.tenable.com/security/research/tra-2020-51"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-g475-pch5-6wvv","url":"https://osv.dev/vulnerability/GHSA-g475-pch5-6wvv"}],"summary":"Authentication bypass in MAGMI"}