{"action":"Upgrade mautic/core to 4.4.12 or later.","affected":[{"fixed":"4.4.12","introduced":"2.14.1"},{"fixed":"5.0.4","introduced":"5.0.0-alpha"}],"component":"mautic/core","cve_ids":["CVE-2022-25775"],"ecosystem":"Packagist","epss":0.00593,"exploited":false,"fixed_versions":["4.4.12","5.0.4"],"ghsa_id":"GHSA-jj6w-2cqg-7p94","id":"tcs_01M5KF4MVWX6ZQ1ZCQRHSHD1NT","modified_at":"2024-09-18T17:09:26.813147Z","published_at":"2024-04-12T17:25:15Z","references":["https://osv.dev/vulnerability/GHSA-jj6w-2cqg-7p94","https://github.com/mautic/mautic/security/advisories/GHSA-jj6w-2cqg-7p94","https://nvd.nist.gov/vuln/detail/CVE-2022-25775","https://github.com/mautic/mautic/commit/cab65e0acc4f23c4f07c117dee1b69dac5abed3f","https://github.com/mautic/mautic/commit/e75b1eea16309588f069169b5882cf53f854dbd8","https://github.com/mautic/mautic"],"severity":{"label":"medium","score":6.6},"sources":[{"source":"osv","source_id":"GHSA-jj6w-2cqg-7p94","url":"https://osv.dev/vulnerability/GHSA-jj6w-2cqg-7p94"}],"summary":"Mautic SQL Injection in dynamic Reports"}