{"action":"Upgrade october/october to 1.0.427 or later.","affected":[{"fixed":"1.0.427","introduced":"0"}],"component":"october/october","cve_ids":["CVE-2017-16244"],"ecosystem":"Packagist","epss":0.01976,"exploited":false,"fixed_versions":["1.0.427"],"ghsa_id":"GHSA-vm6r-4p4v-232x","id":"tcs_01M5KF98QJPFDYPB7M244FZ6D4","modified_at":"2024-02-21T05:32:51.755264Z","published_at":"2022-05-13T01:24:46Z","references":["https://osv.dev/vulnerability/GHSA-vm6r-4p4v-232x","https://nvd.nist.gov/vuln/detail/CVE-2017-16244","https://github.com/octobercms/october/commit/4a6e0e1e0e2c3facebc17e0db38c5b4d4cb05bd0","https://github.com/octobercms/october","https://www.exploit-db.com/exploits/43106"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-vm6r-4p4v-232x","url":"https://osv.dev/vulnerability/GHSA-vm6r-4p4v-232x"}],"summary":"October CMS CSRF"}