{"action":"Upgrade craftcms/cms to 2.6.2976 or later.","affected":[{"fixed":"2.6.2976","introduced":"0"}],"component":"craftcms/cms","cve_ids":["CVE-2017-8385"],"ecosystem":"Packagist","epss":0.00964,"exploited":false,"fixed_versions":["2.6.2976"],"ghsa_id":"GHSA-j27g-r58q-624w","id":"tcs_01M5KF42NX6HTR9S19QZPXFWFX","modified_at":"2024-04-25T22:56:48.035042Z","published_at":"2022-05-17T02:46:10Z","references":["https://osv.dev/vulnerability/GHSA-j27g-r58q-624w","https://nvd.nist.gov/vuln/detail/CVE-2017-8385","https://github.com/craftcms/cms/commit/38c594badc8efc468b6162ec921d645011a50d35","https://github.com/craftcms/cms","https://github.com/craftcms/cms/blob/2.6.2976/CHANGELOG.md#security","https://twitter.com/CraftCMS/status/857743080224473088"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-j27g-r58q-624w","url":"https://osv.dev/vulnerability/GHSA-j27g-r58q-624w"}],"summary":"Craft CMS subject to URL forgery"}