{"action":"Upgrade islandora/islandora to 2.4.1 or later.","affected":[{"fixed":"2.4.1","introduced":"2.0"}],"component":"islandora/islandora","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.4.1"],"ghsa_id":"GHSA-m58q-qq5h-mgqq","id":"tcs_01M5KF55J74P3HBEZD7CSYCNEP","modified_at":"2024-11-28T05:44:01.860547Z","published_at":"2022-07-21T22:36:20Z","references":["https://osv.dev/vulnerability/GHSA-m58q-qq5h-mgqq","https://github.com/Islandora/islandora/security/advisories/GHSA-m58q-qq5h-mgqq","https://github.com/Islandora/islandora/commit/573d6878edf057987f1e41e5068de0074573e4c7","https://github.com/Islandora-CLAW/islandora","https://github.com/Islandora/islandora/releases/tag/2.4.1"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-m58q-qq5h-mgqq","url":"https://osv.dev/vulnerability/GHSA-m58q-qq5h-mgqq"}],"summary":"Islandora 2.0 before 2.4.1 could allow any user to upload content into a repository"}