{"action":"Upgrade elefant/cms to 1.3.13 or later.","affected":[{"fixed":"1.3.13","introduced":"0"}],"component":"elefant/cms","cve_ids":["CVE-2017-20062"],"ecosystem":"Packagist","epss":0.00384,"exploited":false,"fixed_versions":["1.3.13"],"ghsa_id":"GHSA-pq7f-cq6q-94xh","id":"tcs_01M5KF6JJ2NJ9SAFJRMB36CKET","modified_at":"2023-11-08T03:59:17.077573Z","published_at":"2022-06-21T00:00:48Z","references":["https://osv.dev/vulnerability/GHSA-pq7f-cq6q-94xh","https://nvd.nist.gov/vuln/detail/CVE-2017-20062","https://github.com/jbroadway/elefant","https://vuldb.com/?id.97259","http://seclists.org/fulldisclosure/2017/Feb/37"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-pq7f-cq6q-94xh","url":"https://osv.dev/vulnerability/GHSA-pq7f-cq6q-94xh"}],"summary":"Cross-Site Request Forgery in Elefant CMS"}