{"action":"Upgrade admidio/admidio to 4.2.10 or later.","affected":[{"fixed":"4.2.10","introduced":"0"}],"component":"admidio/admidio","cve_ids":["CVE-2023-3692"],"ecosystem":"Packagist","epss":0.01008,"exploited":false,"fixed_versions":["4.2.10"],"ghsa_id":"GHSA-q347-jrx8-5pw9","id":"tcs_01M5KF6V78DJD7SARGRPA0M2SK","modified_at":"2024-02-16T08:06:35.767732Z","published_at":"2023-07-16T03:30:52Z","references":["https://osv.dev/vulnerability/GHSA-q347-jrx8-5pw9","https://nvd.nist.gov/vuln/detail/CVE-2023-3692","https://github.com/admidio/admidio/commit/d66585d14b1160712a8a9bfaf9769dd3da0e9a83","https://github.com/admidio/admidio","https://huntr.dev/bounties/be6616eb-384d-40d6-b1fd-0ec9e4973f12"],"severity":{"label":"medium","score":6.7},"sources":[{"source":"osv","source_id":"GHSA-q347-jrx8-5pw9","url":"https://osv.dev/vulnerability/GHSA-q347-jrx8-5pw9"}],"summary":"Admidio vulnerable to Unrestricted Upload of File with Dangerous Type"}