{"action":"Upgrade pimcore/pimcore to 10.6.4 or later.","affected":[{"fixed":"10.6.4","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2023-3819"],"ecosystem":"Packagist","epss":0.00655,"exploited":false,"fixed_versions":["10.6.4"],"ghsa_id":"GHSA-r87r-982q-2c3q","id":"tcs_01M5KF82BT5JA983T7YB24CXEK","modified_at":"2024-02-16T08:10:47.026703Z","published_at":"2023-07-21T20:18:22Z","references":["https://osv.dev/vulnerability/GHSA-r87r-982q-2c3q","https://github.com/pimcore/pimcore/security/advisories/GHSA-r87r-982q-2c3q","https://nvd.nist.gov/vuln/detail/CVE-2023-3819","https://github.com/pimcore/pimcore/commit/0237527b3244d251fa5ecd4912dfe4f8b2125c54","https://github.com/pimcore/pimcore","https://huntr.dev/bounties/be5e4d4c-1b0b-4c01-a1fc-00533135817c"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-r87r-982q-2c3q","url":"https://osv.dev/vulnerability/GHSA-r87r-982q-2c3q"}],"summary":"Pimcore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor"}