{"action":"Upgrade elgg/elgg to 3.3.22 or later.","affected":[{"fixed":"3.3.22","introduced":"0"}],"component":"elgg/elgg","cve_ids":["CVE-2021-3964"],"ecosystem":"Packagist","epss":0.00805,"exploited":false,"fixed_versions":["3.3.22"],"ghsa_id":"GHSA-gwpx-q2h9-wxgx","id":"tcs_01M5KF35S66N9SVS5WWTAEQ77S","modified_at":"2024-02-17T05:32:18.435870Z","published_at":"2021-12-03T20:43:25Z","references":["https://osv.dev/vulnerability/GHSA-gwpx-q2h9-wxgx","https://nvd.nist.gov/vuln/detail/CVE-2021-3964","https://github.com/elgg/elgg/commit/d9fcad76ee380ea17edd61d13d0f87828ea3f744","https://github.com/elgg/elgg","https://huntr.dev/bounties/a4df45d6-b739-4299-967f-c960b569383a"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-gwpx-q2h9-wxgx","url":"https://osv.dev/vulnerability/GHSA-gwpx-q2h9-wxgx"}],"summary":"elgg is vulnerable to Authorization Bypass Through User-Controlled Key"}