{"action":"Upgrade ezsystems/ezplatform to 1.7.9.1 or later.","affected":[{"fixed":"2.5.4","introduced":"2.5.0"},{"fixed":"1.13.5.1","introduced":"1.13.0"},{"fixed":"1.7.9.1","introduced":"1.7.0"}],"component":"ezsystems/ezplatform","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.5.4","1.13.5.1","1.7.9.1"],"ghsa_id":"GHSA-qhjc-hg94-245v","id":"tcs_01M5KF7BAH53AB7JBNEY8CMNNM","modified_at":"2024-11-29T05:33:59.442523Z","published_at":"2024-05-15T21:18:20Z","references":["https://osv.dev/vulnerability/GHSA-qhjc-hg94-245v","https://github.com/ezsystems/ezplatform/commit/34ce86722b36a172e587068fe64a84faa7320cc2","https://github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezplatform/2019-09-03-2.yaml","https://github.com/ezsystems/ezplatform","https://share.ez.no/community-project/security-advisories/ezsa-2019-007-prevent-accepting-app.php-in-url-in-platform.sh"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-qhjc-hg94-245v","url":"https://osv.dev/vulnerability/GHSA-qhjc-hg94-245v"}],"summary":"eZ Platform Prevent accepting app.php in URL in Platform.sh"}