{"action":"Upgrade contao/core-bundle to 4.7.3 or later.","affected":[{"fixed":"4.7.3","introduced":"4.7.0"}],"component":"contao/core-bundle","cve_ids":["CVE-2019-10642"],"ecosystem":"Packagist","epss":0.00499,"exploited":false,"fixed_versions":["4.7.3"],"ghsa_id":"GHSA-hwmh-9jj9-8c9c","id":"tcs_01M5KF3ZNMTAWAH6FYFEMJR5N8","modified_at":"2024-04-25T23:28:38.106370Z","published_at":"2022-05-14T01:09:23Z","references":["https://osv.dev/vulnerability/GHSA-hwmh-9jj9-8c9c","https://nvd.nist.gov/vuln/detail/CVE-2019-10642","https://github.com/contao/contao/commit/ee2c8130c2e68a1d0d2e75bd6b774c4393942b15","https://contao.org/en/news.html","https://contao.org/en/news/security-vulnerability-cve-2019-10642.html","https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2019-10642.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2019-10642.yaml","https://github.com/contao/contao"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-hwmh-9jj9-8c9c#Packagist/contao/core-bundle","url":"https://osv.dev/vulnerability/GHSA-hwmh-9jj9-8c9c"}],"summary":"Contao CSRF Token Bypass"}