{"action":"Upgrade phpxmlrpc/phpxmlrpc to 4.9.0 or later.","affected":[{"fixed":"4.9.0","introduced":"0"}],"component":"phpxmlrpc/phpxmlrpc","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["4.9.0"],"ghsa_id":"GHSA-m95x-m25c-w9mp","id":"tcs_01M5KF5CF54RBGYWQ65JGBAN6C","modified_at":"2024-11-28T05:41:50.702856Z","published_at":"2023-01-11T23:54:47Z","references":["https://osv.dev/vulnerability/GHSA-m95x-m25c-w9mp","https://github.com/gggeek/phpxmlrpc/security/advisories/GHSA-m95x-m25c-w9mp","https://github.com/gggeek/phpxmlrpc/issues/81","https://github.com/gggeek/phpxmlrpc/commit/cf6e605e09d001ce520bfa8e7b168cfa514e663b","https://github.com/gggeek/phpxmlrpc"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-m95x-m25c-w9mp","url":"https://osv.dev/vulnerability/GHSA-m95x-m25c-w9mp"}],"summary":"XML-RPC for PHP allows access to local files via malicious argument to the Client::send method"}