{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.10.9"}],"component":"automad/automad","cve_ids":["CVE-2023-7037"],"ecosystem":"Packagist","epss":0.00708,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-q5q3-qm26-9jwm","id":"tcs_01M5KF6ZEBSH064G46BJKH220S","modified_at":"2024-08-19T21:09:45.467755Z","published_at":"2023-12-21T18:30:23Z","references":["https://osv.dev/vulnerability/GHSA-q5q3-qm26-9jwm","https://nvd.nist.gov/vuln/detail/CVE-2023-7037","https://github.com/marcantondahmen/automad","https://github.com/screetsec/VDD/tree/main/Automad%20CMS/Authenticated%20Blind%20SSRF","https://vuldb.com/?ctiid.248686","https://vuldb.com/?id.248686"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-q5q3-qm26-9jwm","url":"https://osv.dev/vulnerability/GHSA-q5q3-qm26-9jwm"}],"summary":"Authenticated Blind SSRF in automad/automad"}