{"action":"Upgrade ezsystems/ezpublish-legacy to 2017.12.7.4 or later.","affected":[{"fixed":"2019.03.6.1","introduced":"2018.06.0"},{"fixed":"2017.12.7.4","introduced":"0"}],"component":"ezsystems/ezpublish-legacy","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2019.03.6.1","2017.12.7.4"],"ghsa_id":"GHSA-jpwx-ffjq-wr4w","id":"tcs_01M5KF4S0H51J5PGZSS25F5J4V","modified_at":"2024-12-02T05:54:42.708773Z","published_at":"2021-09-07T22:54:23Z","references":["https://osv.dev/vulnerability/GHSA-jpwx-ffjq-wr4w","https://github.com/ezsystems/ezpublish-legacy/security/advisories/GHSA-jpwx-ffjq-wr4w","https://github.com/ezsystems/ezpublish-legacy/commit/f8e3a97afd92efb9148134a4bacb35a875777a42","https://developers.ibexa.co/security-advisories/ibexa-sa-2021-005-content-object-state-fetch-functions-open-to-sql-injection","https://github.com/ezsystems/ezpublish-legacy"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-jpwx-ffjq-wr4w","url":"https://osv.dev/vulnerability/GHSA-jpwx-ffjq-wr4w"}],"summary":"Content object state fetch functions open to SQL injection"}