{"action":"Upgrade tribalsystems/zenario to 9.0.55143 or later.","affected":[{"fixed":"9.0.55143","introduced":"0"}],"component":"tribalsystems/zenario","cve_ids":["CVE-2021-42171"],"ecosystem":"Packagist","epss":0.02523,"exploited":false,"fixed_versions":["9.0.55143"],"ghsa_id":"GHSA-rgg3-3wh7-w935","id":"tcs_01M5KF88EV4GX5FBH49JAZWDH3","modified_at":"2023-11-08T04:07:05.098121Z","published_at":"2022-03-15T00:00:58Z","references":["https://osv.dev/vulnerability/GHSA-rgg3-3wh7-w935","https://nvd.nist.gov/vuln/detail/CVE-2021-42171","https://github.com/hieuminhnv/Zenario-CMS-9.0-last-version/issues/2","https://github.com/TribalSystems/Zenario/commit/4566d8a9ac6755f098b3373252fdb17754a77007","https://github.com/TribalSystems/Zenario","https://github.com/TribalSystems/Zenario/releases/tag/9.0.55141","https://minhnq22.medium.com/file-upload-to-rce-on-zenario-9-0-54156-cms-fa05fcc6cf74","http://packetstormsecurity.com/files/166617/Zenario-CMS-9.0.54156-Remote-Code-Execution.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-rgg3-3wh7-w935","url":"https://osv.dev/vulnerability/GHSA-rgg3-3wh7-w935"}],"summary":"Unrestricted Upload of File with Dangerous Type in Zenario CMS"}