{"action":"Upgrade concrete5/concrete5 to 8.5.3 or later.","affected":[{"fixed":"8.5.3","introduced":"0"}],"component":"concrete5/concrete5","cve_ids":["CVE-2020-14961"],"ecosystem":"Packagist","epss":0.00943,"exploited":false,"fixed_versions":["8.5.3"],"ghsa_id":"GHSA-g4gm-pxh3-29fq","id":"tcs_01M5KF2AKSPZK0QNRPD5ERFYFW","modified_at":"2023-11-08T04:02:28.010294Z","published_at":"2022-02-10T22:28:41Z","references":["https://osv.dev/vulnerability/GHSA-g4gm-pxh3-29fq","https://nvd.nist.gov/vuln/detail/CVE-2020-14961","https://github.com/concrete5/concrete5/pull/8651","https://github.com/concrete5/concrete5","https://github.com/concrete5/concrete5/releases/tag/8.5.3"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-g4gm-pxh3-29fq","url":"https://osv.dev/vulnerability/GHSA-g4gm-pxh3-29fq"}],"summary":"Unrestricted Uploads in Concrete5"}