{"action":"Upgrade pimcore/demo to 10.3.0 or later.","affected":[{"fixed":"10.3.0","introduced":"0"}],"component":"pimcore/demo","cve_ids":["CVE-2023-5192"],"ecosystem":"Packagist","epss":0.0099,"exploited":false,"fixed_versions":["10.3.0"],"ghsa_id":"GHSA-p76j-h4m8-hx5c","id":"tcs_01M5KF65DSX8AB9MZXBKW5ZQ0T","modified_at":"2024-02-16T08:12:46.043663Z","published_at":"2023-09-27T15:30:40Z","references":["https://osv.dev/vulnerability/GHSA-p76j-h4m8-hx5c","https://nvd.nist.gov/vuln/detail/CVE-2023-5192","https://github.com/pimcore/demo/pull/437","https://github.com/pimcore/demo/commit/a2a7ff3b565882aefb759804aac4a51afb458f1f","https://github.com/pimcore/demo","https://huntr.dev/bounties/65c954f2-79c3-4672-8846-a3035e7a1db7"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-p76j-h4m8-hx5c","url":"https://osv.dev/vulnerability/GHSA-p76j-h4m8-hx5c"}],"summary":"Pimcore Demo Allows GraphQL Introspection"}