{"action":"Upgrade getgrav/grav to 1.6.30 or later.","affected":[{"introduced":"1.7.0-beta.1","last_affected":"1.7.0-rc.17"},{"fixed":"1.6.30","introduced":"0"}],"component":"getgrav/grav","cve_ids":["CVE-2020-29555"],"ecosystem":"Packagist","epss":0.02899,"exploited":false,"fixed_versions":["1.6.30"],"ghsa_id":"GHSA-gpmf-q5jh-hjx4","id":"tcs_01M5KF2ZP3P0NMFB5K07R0WEAC","modified_at":"2024-04-24T22:28:31.901173Z","published_at":"2022-05-24T17:44:32Z","references":["https://osv.dev/vulnerability/GHSA-gpmf-q5jh-hjx4","https://nvd.nist.gov/vuln/detail/CVE-2020-29555","https://blog.bssi.fr/cve-2020-29553-cve-2020-29555-cve-2020-29556-multiple-vulnerabilities-within-cms-grav","https://github.com/getgrav/grav"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-gpmf-q5jh-hjx4","url":"https://osv.dev/vulnerability/GHSA-gpmf-q5jh-hjx4"}],"summary":"Grav CMS Arbitrary File Deletion"}