{"action":"Upgrade directmailteam/direct-mail to 6.0.3 or later.","affected":[{"fixed":"9.5.2","introduced":"8.0.0"},{"fixed":"7.0.3","introduced":"7.0.0"},{"fixed":"6.0.3","introduced":"0"}],"component":"directmailteam/direct-mail","cve_ids":["CVE-2023-50461"],"ecosystem":"Packagist","epss":0.00514,"exploited":false,"fixed_versions":["9.5.2","7.0.3","6.0.3"],"ghsa_id":"GHSA-p6xx-fhfw-7mj7","id":"tcs_01M5KF64D9HX648Z8J1SZVSGEW","modified_at":"2024-11-30T05:23:48.162535Z","published_at":"2023-12-13T23:10:38Z","references":["https://osv.dev/vulnerability/GHSA-p6xx-fhfw-7mj7","https://github.com/FriendsOfPHP/security-advisories/blob/master/directmailteam/direct-mail/CVE-2023-50461.yaml","https://github.com/kartolo/direct_mail","https://typo3.org/security/advisory/typo3-ext-sa-2023-011"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-p6xx-fhfw-7mj7","url":"https://osv.dev/vulnerability/GHSA-p6xx-fhfw-7mj7"}],"summary":"Configuration Injection in extension \"Direct Mail\" (direct_mail)"}