{"action":"Upgrade elefant/cms to 1.3.13 or later.","affected":[{"fixed":"1.3.13","introduced":"0"}],"component":"elefant/cms","cve_ids":["CVE-2017-20063"],"ecosystem":"Packagist","epss":0.00865,"exploited":false,"fixed_versions":["1.3.13"],"ghsa_id":"GHSA-mwh6-g9wx-xcx3","id":"tcs_01M5KF5WXDKDS2M7E5ZCPZMWYW","modified_at":"2023-11-08T03:59:17.137159Z","published_at":"2022-06-21T00:00:48Z","references":["https://osv.dev/vulnerability/GHSA-mwh6-g9wx-xcx3","https://nvd.nist.gov/vuln/detail/CVE-2017-20063","https://github.com/jbroadway/elefant","https://vuldb.com/?id.97260","http://seclists.org/fulldisclosure/2017/Feb/39"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-mwh6-g9wx-xcx3","url":"https://osv.dev/vulnerability/GHSA-mwh6-g9wx-xcx3"}],"summary":"Unrestricted Upload of File with Dangerous Type in Elefant CMS"}