{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.3.12"}],"component":"yuan1994/tpadmin","cve_ids":["CVE-2023-1971"],"ecosystem":"Packagist","epss":0.00636,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-qr7h-8pv2-xvx2","id":"tcs_01M5KF7J5GQ537KH9HCV0PA86N","modified_at":"2024-02-16T08:15:12.684729Z","published_at":"2023-04-10T18:30:22Z","references":["https://osv.dev/vulnerability/GHSA-qr7h-8pv2-xvx2","https://nvd.nist.gov/vuln/detail/CVE-2023-1971","https://github.com/yuan1994/tpAdmin","https://tib36.github.io/2023/04/09/tpAdmin-SSRF","https://vuldb.com/?ctiid.225408","https://vuldb.com/?id.225408"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-qr7h-8pv2-xvx2","url":"https://osv.dev/vulnerability/GHSA-qr7h-8pv2-xvx2"}],"summary":"yuan1994 tpAdmin vulnerable to Server-Side Request Forgery"}