{"action":"Upgrade microweber/microweber to 1.2.3 or later.","affected":[{"fixed":"1.2.3","introduced":"0"}],"component":"microweber/microweber","cve_ids":["CVE-2020-28337"],"ecosystem":"Packagist","epss":0.16611,"exploited":false,"fixed_versions":["1.2.3"],"ghsa_id":"GHSA-pqcf-v8v5-jmcg","id":"tcs_01M5KF6JXBSSN130C9JWGAWKGC","modified_at":"2023-11-08T04:03:25.135943Z","published_at":"2022-02-10T22:23:18Z","references":["https://osv.dev/vulnerability/GHSA-pqcf-v8v5-jmcg","https://nvd.nist.gov/vuln/detail/CVE-2020-28337","https://github.com/microweber/microweber/commit/777ee9c3e7519eb3672c79ac41066175b2001b50","https://sl1nki.page/advisories/CVE-2020-28337","https://sl1nki.page/blog/2021/02/01/microweber-zip-slip","http://packetstormsecurity.com/files/162514/Microweber-CMS-1.1.20-Remote-Code-Execution.html"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-pqcf-v8v5-jmcg","url":"https://osv.dev/vulnerability/GHSA-pqcf-v8v5-jmcg"}],"summary":"Zip slip in Microweber"}