{"action":"Upgrade sabre/dav to 1.6.9 or later.","affected":[{"fixed":"1.7.7","introduced":"1.7.0"},{"fixed":"1.8.5","introduced":"1.8.0"},{"fixed":"1.6.9","introduced":"1.6.0"}],"component":"sabre/dav","cve_ids":["CVE-2013-1939"],"ecosystem":"Packagist","epss":0.01779,"exploited":false,"fixed_versions":["1.7.7","1.8.5","1.6.9"],"ghsa_id":"GHSA-qg5v-jw6f-rpfj","id":"tcs_01M5KF79C7YSTWEGQHSCG26EYX","modified_at":"2024-12-04T05:29:58.274167Z","published_at":"2022-05-14T01:52:20Z","references":["https://osv.dev/vulnerability/GHSA-qg5v-jw6f-rpfj","https://nvd.nist.gov/vuln/detail/CVE-2013-1939","https://github.com/FriendsOfPHP/security-advisories/blob/master/sabre/dav/CVE-2013-1939.yaml","https://github.com/sabre-io/dav","https://groups.google.com/forum/?fromgroups=#!topic/sabredav-discuss/ehOUu7wTSGQ","https://groups.google.com/forum/?fromgroups=#%21topic/sabredav-discuss/ehOUu7wTSGQ","http://owncloud.org/about/security/advisories/oC-SA-2013-016"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-qg5v-jw6f-rpfj","url":"https://osv.dev/vulnerability/GHSA-qg5v-jw6f-rpfj"}],"summary":"SabreDAV Directory Traversal vulnerability"}