{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"5.3.0","last_affected":"5.6.0"}],"component":"shopware/shopware","cve_ids":["CVE-2019-12799"],"ecosystem":"Packagist","epss":0.54055,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rf8f-hqjv-986p","id":"tcs_01M5KF86KYTWG6QAS77PG7QP3Q","modified_at":"2024-02-16T08:16:39.454275Z","published_at":"2022-05-24T16:48:00Z","references":["https://osv.dev/vulnerability/GHSA-rf8f-hqjv-986p","https://nvd.nist.gov/vuln/detail/CVE-2019-12799","https://github.com/rapid7/metasploit-framework/pull/11828","https://github.com/advisories/GHSA-6m27-7cqj-2mxw","https://github.com/shopware5/shopware","https://web.archive.org/web/20171112153855/https://blog.ripstech.com/2017/shopware-php-object-instantiation-to-blind-xxe"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-rf8f-hqjv-986p","url":"https://osv.dev/vulnerability/GHSA-rf8f-hqjv-986p"}],"summary":"Shopware Insecure Deserialization Vulnerability"}