{"action":"Upgrade oro/crm to 1.7.4 or later.","affected":[{"fixed":"1.7.4","introduced":"1.7.0"}],"component":"oro/crm","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.7.4"],"ghsa_id":"GHSA-v8hp-239v-9367","id":"tcs_01M5KF8ZBV0ZMQS6KX0QJ716DH","modified_at":"2024-12-05T05:39:42.111241Z","published_at":"2024-05-20T14:19:27Z","references":["https://osv.dev/vulnerability/GHSA-v8hp-239v-9367","https://github.com/oroinc/crm/commit/f86a959dcd77af09e7a5a5930a60cf409924a2be","https://github.com/FriendsOfPHP/security-advisories/blob/master/oro/crm/2015-07-08.yaml","https://github.com/oroinc/crm","https://oroinc.com/orocrm/blog/orocrm-security-announcement"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-v8hp-239v-9367","url":"https://osv.dev/vulnerability/GHSA-v8hp-239v-9367"}],"summary":"OroCRM Forced Redirect to External Website"}