{"action":"Upgrade foodcoopshop/foodcoopshop to 3.6.1 or later.","affected":[{"fixed":"3.6.1","introduced":"3.2.0"}],"component":"foodcoopshop/foodcoopshop","cve_ids":["CVE-2023-46725"],"ecosystem":"Packagist","epss":0.00452,"exploited":false,"fixed_versions":["3.6.1"],"ghsa_id":"GHSA-jhww-fx2j-3rf7","id":"tcs_01M5KF4M9JHZXH9N46YC50BARB","modified_at":"2024-02-16T08:23:53.682135Z","published_at":"2023-11-02T20:53:19Z","references":["https://osv.dev/vulnerability/GHSA-jhww-fx2j-3rf7","https://github.com/foodcoopshop/foodcoopshop/security/advisories/GHSA-jhww-fx2j-3rf7","https://nvd.nist.gov/vuln/detail/CVE-2023-46725","https://github.com/foodcoopshop/foodcoopshop/pull/972","https://github.com/foodcoopshop/foodcoopshop/commit/0d5bec5c4c22e1affe7fd321a30e3f3a4d99e808","https://github.com/foodcoopshop/foodcoopshop","https://pastebin.com/8K5Brwbq"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-jhww-fx2j-3rf7","url":"https://osv.dev/vulnerability/GHSA-jhww-fx2j-3rf7"}],"summary":"FoodCoopShop Server-Side Request Forgery vulnerability"}