{"action":"Upgrade yetiforce/yetiforce-crm to 6.4.0 or later.","affected":[{"fixed":"6.4.0","introduced":"0"}],"component":"yetiforce/yetiforce-crm","cve_ids":["CVE-2022-1411"],"ecosystem":"Packagist","epss":0.00761,"exploited":false,"fixed_versions":["6.4.0"],"ghsa_id":"GHSA-pqr6-3j58-9w58","id":"tcs_01M5KF6M2MK0S5YFQ52XJY2W64","modified_at":"2023-11-08T04:07:48.069962Z","published_at":"2022-05-06T00:00:48Z","references":["https://osv.dev/vulnerability/GHSA-pqr6-3j58-9w58","https://nvd.nist.gov/vuln/detail/CVE-2022-1411","https://github.com/yetiforcecompany/yetiforcecrm/commit/bf69c427260011ffca42f7b6935bb54080c54124","https://github.com/yetiforcecompany/yetiforcecrm","https://huntr.dev/bounties/75c7cf09-d118-4f91-9686-22b142772529"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-pqr6-3j58-9w58","url":"https://osv.dev/vulnerability/GHSA-pqr6-3j58-9w58"}],"summary":"Unrestricted Upload of File with Dangerous Type in yetiforce-crm"}