{"action":"Upgrade pagekit/pagekit to 1.0.11 or later.","affected":[{"fixed":"1.0.11","introduced":"0"}],"component":"pagekit/pagekit","cve_ids":["CVE-2017-5594"],"ecosystem":"Packagist","epss":0.07005,"exploited":false,"fixed_versions":["1.0.11"],"ghsa_id":"GHSA-rp89-32rp-qpq2","id":"tcs_01M5KF8EAEH947AG99MA1HHQG2","modified_at":"2024-04-24T20:43:07.653959Z","published_at":"2022-05-13T01:12:12Z","references":["https://osv.dev/vulnerability/GHSA-rp89-32rp-qpq2","https://nvd.nist.gov/vuln/detail/CVE-2017-5594","https://github.com/pagekit/pagekit/commit/e0454f9c037c427a5ff76a57e78dbf8cc00c268b","https://github.com/pagekit/pagekit","https://securelayer7.net/download/pdf/SecureLayer7-Pentest-report-Pagekit-CMS.pdf","https://securelayer7.net/download/poc/password-reset-vulnerability-exploit-ruby-pagekit-cms.rb.txt","https://www.exploit-db.com/exploits/41143","http://www.securityfocus.com/bid/95806"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rp89-32rp-qpq2","url":"https://osv.dev/vulnerability/GHSA-rp89-32rp-qpq2"}],"summary":"Pagekit Weak Password Recovery Mechanism for Forgotten Password"}