{"action":"Upgrade lms/routes to 2.1.1 or later.","affected":[{"fixed":"2.1.1","introduced":"0"}],"component":"lms/routes","cve_ids":["CVE-2021-36793"],"ecosystem":"Packagist","epss":0.01013,"exploited":false,"fixed_versions":["2.1.1"],"ghsa_id":"GHSA-vpw5-grxx-v396","id":"tcs_01M5KF9BBTM4CHS7KHHV49D948","modified_at":"2023-11-08T04:06:16.675857Z","published_at":"2021-09-02T17:16:56Z","references":["https://osv.dev/vulnerability/GHSA-vpw5-grxx-v396","https://nvd.nist.gov/vuln/detail/CVE-2021-36793","https://github.com/Lacr1ma/routes","https://typo3.org/security/advisory/typo3-ext-sa-2021-008"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-vpw5-grxx-v396","url":"https://osv.dev/vulnerability/GHSA-vpw5-grxx-v396"}],"summary":"CSRF token exposure in TYPO3 extension"}