{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.3.4"}],"component":"microweber/microweber","cve_ids":["CVE-2023-5318"],"ecosystem":"Packagist","epss":0.00653,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-r657-3wqh-g2x9","id":"tcs_01M5KF7YCK7STBJG6WZG7F0XHQ","modified_at":"2024-02-16T08:18:56.374927Z","published_at":"2023-09-30T03:31:49Z","references":["https://osv.dev/vulnerability/GHSA-r657-3wqh-g2x9","https://nvd.nist.gov/vuln/detail/CVE-2023-5318","https://github.com/microweber/microweber/commit/c48b34dfd6cae7a55b452280d692dc62512574b0","https://github.com/microweber/microweber","https://huntr.dev/bounties/17826bdd-8136-48ae-afb9-af627cb6fd5d"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GHSA-r657-3wqh-g2x9","url":"https://osv.dev/vulnerability/GHSA-r657-3wqh-g2x9"}],"summary":"Microweber uses hard coded credentials"}