{"action":"Upgrade contao/contao to 4.7.3 or later.","affected":[{"fixed":"4.7.3","introduced":"4.7.0"}],"component":"contao/contao","cve_ids":["CVE-2019-10643"],"ecosystem":"Packagist","epss":0.01254,"exploited":false,"fixed_versions":["4.7.3"],"ghsa_id":"GHSA-j99g-qjvx-995g","id":"tcs_01M5KF4E844T4TCYADYZA5GMM0","modified_at":"2024-04-25T23:43:34.952691Z","published_at":"2022-05-13T01:07:57Z","references":["https://osv.dev/vulnerability/GHSA-j99g-qjvx-995g","https://nvd.nist.gov/vuln/detail/CVE-2019-10643","https://github.com/contao/contao/commit/70348cc812b110831ad66a4f9857883f75649b88","https://contao.org/en/news.html","https://contao.org/en/news/security-vulnerability-cve-2019-10643.html","https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2019-10643.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2019-10643.yaml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-j99g-qjvx-995g","url":"https://osv.dev/vulnerability/GHSA-j99g-qjvx-995g"}],"summary":"Contao Does Not Expire Tokens Correctly"}