{"action":"Upgrade cakephp/cakephp to 1.1.8.3544 or later.","affected":[{"fixed":"1.1.8.3544","introduced":"1.0.1.2708"}],"component":"cakephp/cakephp","cve_ids":["CVE-2006-5031"],"ecosystem":"Packagist","epss":0.07534,"exploited":false,"fixed_versions":["1.1.8.3544"],"ghsa_id":"GHSA-rw73-xmpv-j5x2","id":"tcs_01M5KF8KYQ2FJSQ36AJE07RRT9","modified_at":"2023-11-08T03:56:47.150440Z","published_at":"2022-05-01T07:24:12Z","references":["https://osv.dev/vulnerability/GHSA-rw73-xmpv-j5x2","https://nvd.nist.gov/vuln/detail/CVE-2006-5031","https://exchange.xforce.ibmcloud.com/vulnerabilities/29115","https://github.com/cakephp/cakephp","http://cakeforge.org/frs/shownotes.php?release_id=134","http://secunia.com/advisories/22040","http://www.gulftech.org/?node=research&article_id=00114-09212006","http://www.securityfocus.com/bid/20150"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-rw73-xmpv-j5x2","url":"https://osv.dev/vulnerability/GHSA-rw73-xmpv-j5x2"}],"summary":"CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files"}