{"action":"Upgrade silverstripe/admin to 1.13.19 or later.","affected":[{"fixed":"1.13.19","introduced":"1.0.0"},{"fixed":"2.1.8","introduced":"2.0.0"}],"component":"silverstripe/admin","cve_ids":["CVE-2023-49783"],"ecosystem":"Packagist","epss":0.00341,"exploited":false,"fixed_versions":["1.13.19","2.1.8"],"ghsa_id":"GHSA-j3m6-gvm8-mhvw","id":"tcs_01M5KF44ZW7XZB1C8RE15W6FAD","modified_at":"2024-02-16T08:17:20.547645Z","published_at":"2024-01-23T20:09:52Z","references":["https://osv.dev/vulnerability/GHSA-j3m6-gvm8-mhvw","https://github.com/silverstripe/silverstripe-admin/security/advisories/GHSA-j3m6-gvm8-mhvw","https://nvd.nist.gov/vuln/detail/CVE-2023-49783","https://github.com/silverstripe-security/security-issues/issues/177","https://github.com/silverstripeltd/product-issues/issues/832","https://github.com/silverstripe/silverstripe-admin/commit/9693130a0a637cdf512277cf5f07e83250b191db","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/admin/CVE-2023-49783.yaml","https://github.com/silverstripe/silverstripe-admin","https://www.silverstripe.org/download/security-releases/CVE-2023-49783"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-j3m6-gvm8-mhvw","url":"https://osv.dev/vulnerability/GHSA-j3m6-gvm8-mhvw"}],"summary":"No permission checks for editing/deleting records with CSV import form"}