{"action":"Upgrade librenms/librenms to 1.65.1 or later.","affected":[{"fixed":"1.65.1","introduced":"0"}],"component":"librenms/librenms","cve_ids":["CVE-2020-15873"],"ecosystem":"Packagist","epss":0.02238,"exploited":false,"fixed_versions":["1.65.1"],"ghsa_id":"GHSA-g5r6-vrmx-9gwj","id":"tcs_01M5KF2CHQWBM8490NDW8CBV6Z","modified_at":"2024-04-24T20:43:08.028007Z","published_at":"2022-05-24T17:24:01Z","references":["https://osv.dev/vulnerability/GHSA-g5r6-vrmx-9gwj","https://nvd.nist.gov/vuln/detail/CVE-2020-15873","https://github.com/librenms/librenms/pull/11923","https://github.com/librenms/librenms/commit/8f3a29cde5bbd8608f9b42923a7d7e2598bcac4e","https://community.librenms.org/c/announcements","https://github.com/librenms/librenms","https://github.com/librenms/librenms/compare/1.65...1.65.1","https://research.loginsoft.com/bugs/blind-sql-injection-in-librenms"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-g5r6-vrmx-9gwj","url":"https://osv.dev/vulnerability/GHSA-g5r6-vrmx-9gwj"}],"summary":"LibreNMS SQL Injection vulnerability"}