{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.0.0"}],"component":"codeigniter4/framework","cve_ids":["CVE-2020-10793"],"ecosystem":"Packagist","epss":0.01898,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jwqp-wh5g-4gmm","id":"tcs_01M5KF4YZ0G5NNEV2EC0CQBCH5","modified_at":"2024-04-24T18:11:18.054901Z","published_at":"2022-05-24T17:12:13Z","references":["https://osv.dev/vulnerability/GHSA-jwqp-wh5g-4gmm","https://nvd.nist.gov/vuln/detail/CVE-2020-10793","https://codeigniter4.github.io/userguide/extending/authentication.html","https://github.com/codeigniter4/framework","https://medium.com/@vbharad/account-takeover-via-modifying-email-id-codeigniter-framework-ca30741ad297"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-jwqp-wh5g-4gmm","url":"https://osv.dev/vulnerability/GHSA-jwqp-wh5g-4gmm"}],"summary":"CodeIgniter Improper Privilege Management"}