{"action":"Upgrade contao/contao to 3.5.37 or later.","affected":[{"fixed":"3.5.37","introduced":"3.0.0"},{"fixed":"4.6.11","introduced":"4.6.0"},{"fixed":"4.4.31","introduced":"4.4.0"}],"component":"contao/contao","cve_ids":["CVE-2018-20028"],"ecosystem":"Packagist","epss":0.00906,"exploited":false,"fixed_versions":["3.5.37","4.6.11","4.4.31"],"ghsa_id":"GHSA-q99w-j4mj-7hj8","id":"tcs_01M5KF74V8VFGJWEEP4QVS24HB","modified_at":"2024-04-25T23:28:38.031987Z","published_at":"2022-05-13T01:19:51Z","references":["https://osv.dev/vulnerability/GHSA-q99w-j4mj-7hj8","https://nvd.nist.gov/vuln/detail/CVE-2018-20028","https://github.com/contao/contao/commit/bbe5fe1d385cd1195670e2d6b972272133443c59","https://contao.org/en/news/security-vulnerability-cve-2018-20028.html"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-q99w-j4mj-7hj8","url":"https://osv.dev/vulnerability/GHSA-q99w-j4mj-7hj8"}],"summary":"Contao Information Disclosure via Access Control Flaws"}