{"action":"Upgrade magento/core to 1.9.2.1 or later.","affected":[{"fixed":"1.9.2.1","introduced":"0"}],"component":"magento/core","cve_ids":["CVE-2015-6497"],"ecosystem":"Packagist","epss":0.0737,"exploited":false,"fixed_versions":["1.9.2.1"],"ghsa_id":"GHSA-j4fq-3fm7-wh5v","id":"tcs_01M5KF4694E7BEAZ2PR0JVD8K7","modified_at":"2024-01-10T23:28:18.794715Z","published_at":"2022-05-24T17:06:13Z","references":["https://osv.dev/vulnerability/GHSA-j4fq-3fm7-wh5v","https://nvd.nist.gov/vuln/detail/CVE-2015-6497","https://github.com/magento/magento2","http://blog.mindedsecurity.com/2015/09/autoloaded-file-inclusion-in-magento.html","http://karmainsecurity.com/KIS-2015-04","http://magento.com/security/patches/supee-6482","http://packetstormsecurity.com/files/133544/Magento-1.9.2-File-Inclusion.html","http://seclists.org/fulldisclosure/2015/Sep/48"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-j4fq-3fm7-wh5v","url":"https://osv.dev/vulnerability/GHSA-j4fq-3fm7-wh5v"}],"summary":"Magento arbitrary PHP code execution via the productData parameter"}