{"action":"Upgrade froxlor/froxlor to 0.9.35 or later.","affected":[{"fixed":"0.9.35","introduced":"0"}],"component":"froxlor/froxlor","cve_ids":["CVE-2016-5100"],"ecosystem":"Packagist","epss":0.01915,"exploited":false,"fixed_versions":["0.9.35"],"ghsa_id":"GHSA-qj6h-m7xc-r2v3","id":"tcs_01M5KF7BXAMZ9VPEERABJ84NHK","modified_at":"2024-04-25T21:43:27.390696Z","published_at":"2022-05-17T02:57:53Z","references":["https://osv.dev/vulnerability/GHSA-qj6h-m7xc-r2v3","https://nvd.nist.gov/vuln/detail/CVE-2016-5100","https://github.com/Froxlor/Froxlor/commit/da4ec3e1b591de96675817a009e26e05e848a6ba","https://github.com/Froxlor/Froxlor"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-qj6h-m7xc-r2v3","url":"https://osv.dev/vulnerability/GHSA-qj6h-m7xc-r2v3"}],"summary":"Froxlor guessable password reset token"}