{"action":"Upgrade librenms/librenms to 21.1.0 or later.","affected":[{"fixed":"21.1.0","introduced":"0"}],"component":"librenms/librenms","cve_ids":["CVE-2020-35700"],"ecosystem":"Packagist","epss":0.0234,"exploited":false,"fixed_versions":["21.1.0"],"ghsa_id":"GHSA-h59f-p56g-g75v","id":"tcs_01M5KF3BK0FQC3ZBT037PXJJV0","modified_at":"2023-11-08T04:03:35.426969Z","published_at":"2021-05-06T18:53:02Z","references":["https://osv.dev/vulnerability/GHSA-h59f-p56g-g75v","https://nvd.nist.gov/vuln/detail/CVE-2020-35700","https://github.com/librenms/librenms/issues/12405","https://github.com/librenms/librenms/pull/12422","https://github.com/librenms/librenms/blob/master/app/Http/Controllers/Widgets/TopDevicesController.php","https://github.com/librenms/librenms/releases/tag/21.1.0","https://www.horizon3.ai/disclosures/librenms-second-order-sqli"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-h59f-p56g-g75v","url":"https://osv.dev/vulnerability/GHSA-h59f-p56g-g75v"}],"summary":"SQL Injection in librenms"}