{"action":"Upgrade getkirby/cms to 3.6.6.6 or later.","affected":[{"fixed":"3.6.6.6","introduced":"0"},{"fixed":"3.7.5.5","introduced":"3.7.0"},{"fixed":"3.8.4.4","introduced":"3.8.0"},{"fixed":"3.9.8.2","introduced":"3.9.0"},{"fixed":"3.10.1.1","introduced":"3.10.0"},{"fixed":"4.3.1","introduced":"4.0.0"}],"component":"getkirby/cms","cve_ids":["CVE-2024-41964"],"ecosystem":"Packagist","epss":0.0048,"exploited":false,"fixed_versions":["3.6.6.6","3.7.5.5","3.8.4.4","3.9.8.2","3.10.1.1","4.3.1"],"ghsa_id":"GHSA-jm9m-rqr3-wfmh","id":"tcs_01M5KF4Q0FFF64D6XY7HP2HCD1","modified_at":"2024-08-29T21:41:06.370962Z","published_at":"2024-08-29T17:55:30Z","references":["https://osv.dev/vulnerability/GHSA-jm9m-rqr3-wfmh","https://github.com/getkirby/kirby/security/advisories/GHSA-jm9m-rqr3-wfmh","https://nvd.nist.gov/vuln/detail/CVE-2024-41964","https://github.com/getkirby/kirby/commit/1dbc9215c97a5c22dc7f34a4e3a64d19e1eac151","https://github.com/getkirby/kirby/commit/38636655b054e820f66c3b717c55a9d60fe6400a","https://github.com/getkirby/kirby/commit/83fce501759782cf843b6f1d9293a7c7167e69af","https://github.com/getkirby/kirby/commit/ab95d172667c3cd529917c2bc94d3c7969706d23","https://github.com/getkirby/kirby/commit/af9b0a58dea63effab85525ae217faa1f5ded423","https://github.com/getkirby/kirby/commit/e647a177c75636ef4824662b2ce00d8e5c3a8406","https://github.com/getkirby/kirby","https://github.com/getkirby/kirby/releases/tag/3.10.1.1","https://github.com/getkirby/kirby/releases/tag/3.6.6.6","https://github.com/getkirby/kirby/releases/tag/3.7.5.5","https://github.com/getkirby/kirby/releases/tag/3.8.4.4","https://github.com/getkirby/kirby/releases/tag/3.9.8.2","https://github.com/getkirby/kirby/releases/tag/4.3.1"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-jm9m-rqr3-wfmh","url":"https://osv.dev/vulnerability/GHSA-jm9m-rqr3-wfmh"}],"summary":"Kirby has insufficient permission checks in the language settings"}