{"action":"Upgrade akeneo/pim-community-dev to 1.4.28 or later.","affected":[{"fixed":"1.4.28","introduced":"1.4"},{"fixed":"1.5.15","introduced":"1.5"},{"fixed":"1.6.6","introduced":"1.6"}],"component":"akeneo/pim-community-dev","cve_ids":["CVE-2017-1000009"],"ecosystem":"Packagist","epss":0.03932,"exploited":false,"fixed_versions":["1.4.28","1.5.15","1.6.6"],"ghsa_id":"GHSA-q8cr-xphm-7gfv","id":"tcs_01M5KF73KBY97FBE31AXNQBFQD","modified_at":"2024-04-25T21:57:34.317446Z","published_at":"2022-05-13T01:24:28Z","references":["https://osv.dev/vulnerability/GHSA-q8cr-xphm-7gfv","https://nvd.nist.gov/vuln/detail/CVE-2017-1000009","https://github.com/akeneo/pim-community-dev","https://github.com/akeneo/pim-community-dev/blob/1.5/CHANGELOG-1.5.md#bug-fixes-2","https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.4.md#bug-fixes","https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.6.md#bug-fixes-2"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-q8cr-xphm-7gfv","url":"https://osv.dev/vulnerability/GHSA-q8cr-xphm-7gfv"}],"summary":"Akeneo PIM vulnerable to shell injection in the mass edition"}