{"action":"Upgrade getgrav/grav to 1.6.30 or later.","affected":[{"introduced":"1.7.0-beta.1","last_affected":"1.7.0-rc.17"},{"fixed":"1.6.30","introduced":"0"}],"component":"getgrav/grav","cve_ids":["CVE-2020-29556"],"ecosystem":"Packagist","epss":0.00985,"exploited":false,"fixed_versions":["1.6.30"],"ghsa_id":"GHSA-r3rg-jrjq-w4mr","id":"tcs_01M5KF7V41DHSF92QV8KABJM3S","modified_at":"2024-04-24T22:28:31.970063Z","published_at":"2022-05-24T17:44:32Z","references":["https://osv.dev/vulnerability/GHSA-r3rg-jrjq-w4mr","https://nvd.nist.gov/vuln/detail/CVE-2020-29556","https://blog.bssi.fr/cve-2020-29553-cve-2020-29555-cve-2020-29556-multiple-vulnerabilities-within-cms-grav","https://github.com/getgrav/grav"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-r3rg-jrjq-w4mr","url":"https://osv.dev/vulnerability/GHSA-r3rg-jrjq-w4mr"}],"summary":"Grav CMS Local File Injection"}