{"action":"Upgrade anchorcms/anchor-cms to 0.12.7 or later.","affected":[{"fixed":"0.12.7","introduced":"0"}],"component":"anchorcms/anchor-cms","cve_ids":["CVE-2018-7251"],"ecosystem":"Packagist","epss":0.7183,"exploited":false,"fixed_versions":["0.12.7"],"ghsa_id":"GHSA-hxcw-pqqc-rv85","id":"tcs_01M5KF40WJBBZS4K46BHCRGFHN","modified_at":"2024-02-16T08:24:04.611511Z","published_at":"2022-05-13T01:39:42Z","references":["https://osv.dev/vulnerability/GHSA-hxcw-pqqc-rv85","https://nvd.nist.gov/vuln/detail/CVE-2018-7251","https://github.com/anchorcms/anchor-cms/issues/1247","https://github.com/anchorcms/anchor-cms","https://github.com/anchorcms/anchor-cms/releases/tag/0.12.7","https://twitter.com/finnwea/status/965279233030393856","http://packetstormsecurity.com/files/154723/Anchor-CMS-0.12.3a-Information-Disclosure.html","http://www.andmp.com/2018/02/advisory-assigned-CVE-2018-7251-in-anchorcms.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-hxcw-pqqc-rv85","url":"https://osv.dev/vulnerability/GHSA-hxcw-pqqc-rv85"}],"summary":"Anchor CMS Logs Credentials"}