{"action":"Upgrade derhansen/sf_event_mgt to 4.3.1 or later.","affected":[{"fixed":"4.3.1","introduced":"0"},{"fixed":"5.1.1","introduced":"5.0.0"}],"component":"derhansen/sf_event_mgt","cve_ids":["CVE-2020-25026"],"ecosystem":"Packagist","epss":0.0077,"exploited":false,"fixed_versions":["4.3.1","5.1.1"],"ghsa_id":"GHSA-g8rg-7rpr-cwr2","id":"tcs_01M5KF2GWT817W368EGCWWKZJP","modified_at":"2023-11-08T04:03:09.360126Z","published_at":"2020-09-02T18:03:26Z","references":["https://osv.dev/vulnerability/GHSA-g8rg-7rpr-cwr2","https://github.com/derhansen/sf_event_mgt/security/advisories/GHSA-g8rg-7rpr-cwr2","https://nvd.nist.gov/vuln/detail/CVE-2020-25026","https://github.com/derhansen/sf_event_mgt/commit/17edcbf608b252cc1123e1279f0735f6aa28fef4","https://packagist.org/packages/derhansen/sf_event_mgt","https://typo3.org/help/security-advisories","https://typo3.org/security/advisory/typo3-ext-sa-2020-017"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-g8rg-7rpr-cwr2","url":"https://osv.dev/vulnerability/GHSA-g8rg-7rpr-cwr2"}],"summary":"Information Disclosure in TYPO3 extension sf_event_mgt"}