{"action":"Upgrade flarum/core to 1.6.3 or later.","affected":[{"fixed":"1.6.3","introduced":"1.3.0"}],"component":"flarum/core","cve_ids":["CVE-2023-22489"],"ecosystem":"Packagist","epss":0.0058,"exploited":false,"fixed_versions":["1.6.3"],"ghsa_id":"GHSA-hph3-hv3c-7725","id":"tcs_01M5KF3SMKEQH98SBVWR5R32D0","modified_at":"2023-11-08T04:11:36.542686Z","published_at":"2023-01-10T22:28:19Z","references":["https://osv.dev/vulnerability/GHSA-hph3-hv3c-7725","https://github.com/flarum/framework/security/advisories/GHSA-hph3-hv3c-7725","https://nvd.nist.gov/vuln/detail/CVE-2023-22489","https://github.com/flarum/framework/commit/12f14112a0ecd1484d97330b82beb2a145919015","https://github.com/flarum/framework","https://github.com/flarum/framework/releases/tag/v1.6.3"],"severity":{"label":"low","score":3.5},"sources":[{"source":"osv","source_id":"GHSA-hph3-hv3c-7725","url":"https://osv.dev/vulnerability/GHSA-hph3-hv3c-7725"}],"summary":"Any Flarum user including unactivated can reply in public discussions whose first post was permanently deleted"}