{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.6.3000"}],"component":"craftcms/cms","cve_ids":["CVE-2018-3814"],"ecosystem":"Packagist","epss":0.01878,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-r342-vjc4-wrmj","id":"tcs_01M5KF7SGVA429NAJEK23QH535","modified_at":"2024-04-25T22:56:48.562006Z","published_at":"2022-05-13T01:20:14Z","references":["https://osv.dev/vulnerability/GHSA-r342-vjc4-wrmj","https://nvd.nist.gov/vuln/detail/CVE-2018-3814","https://github.com/Snowty/myCVE/blob/master/CraftCMS-2.6.3000/README.md","https://github.com/craftcms/cms","https://web.archive.org/web/20170612231205/http://0day5.com/archives/4122"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-r342-vjc4-wrmj","url":"https://osv.dev/vulnerability/GHSA-r342-vjc4-wrmj"}],"summary":"Craft CMS PHP Code Injection Vulnerability"}