{"action":"Upgrade mautic/core to 4.4.12 or later.","affected":[{"fixed":"4.4.12","introduced":"1.0.0-beta4"},{"fixed":"5.0.4","introduced":"5.0.0-alpha"}],"component":"mautic/core","cve_ids":["CVE-2022-25777"],"ecosystem":"Packagist","epss":0.00445,"exploited":false,"fixed_versions":["4.4.12","5.0.4"],"ghsa_id":"GHSA-mgv8-w49f-822w","id":"tcs_01M5KF5J9JK5D5E3NSC7EBJZ1W","modified_at":"2024-09-18T19:09:19.976216Z","published_at":"2024-04-12T21:25:18Z","references":["https://osv.dev/vulnerability/GHSA-mgv8-w49f-822w","https://github.com/mautic/mautic/security/advisories/GHSA-mgv8-w49f-822w","https://nvd.nist.gov/vuln/detail/CVE-2022-25777","https://github.com/mautic/mautic/commit/b4b4ab5f0613854152ceb7b5e5228acf50648fd0","https://github.com/mautic/mautic/commit/c54befd9eaaa49e4fc10a0fe22435c09ef2821b2","https://github.com/mautic/mautic"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-mgv8-w49f-822w","url":"https://osv.dev/vulnerability/GHSA-mgv8-w49f-822w"}],"summary":"Mautic: MST-48 Server-Side Request Forgery in Asset section"}