{"action":"Upgrade aimeos/aimeos-core to 2024.04.5 or later.","affected":[{"fixed":"2024.04.5","introduced":"2024.04.1"}],"component":"aimeos/aimeos-core","cve_ids":["CVE-2024-37295"],"ecosystem":"Packagist","epss":0.00607,"exploited":false,"fixed_versions":["2024.04.5"],"ghsa_id":"GHSA-rhc2-23c2-ww7c","id":"tcs_01M5KF89WCM6JMYV5GQM3XEKEG","modified_at":"2024-06-11T21:14:02.296786Z","published_at":"2024-06-05T13:29:47Z","references":["https://osv.dev/vulnerability/GHSA-rhc2-23c2-ww7c","https://github.com/aimeos/aimeos-core/security/advisories/GHSA-rhc2-23c2-ww7c","https://nvd.nist.gov/vuln/detail/CVE-2024-37295","https://github.com/aimeos/aimeos-core"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-rhc2-23c2-ww7c","url":"https://osv.dev/vulnerability/GHSA-rhc2-23c2-ww7c"}],"summary":"Remote code execution in web server context"}