{"action":"Upgrade contao/core-bundle to 4.4.39 or later.","affected":[{"fixed":"4.4.39","introduced":"4.1.0"},{"fixed":"4.7.5","introduced":"4.5.0"}],"component":"contao/core-bundle","cve_ids":["CVE-2019-11512"],"ecosystem":"Packagist","epss":0.01462,"exploited":false,"fixed_versions":["4.4.39","4.7.5"],"ghsa_id":"GHSA-vq59-x6mq-4wgw","id":"tcs_01M5KF9BSHVSAC7M0YAHN40K0A","modified_at":"2024-04-25T23:28:38.169050Z","published_at":"2022-05-24T16:49:47Z","references":["https://osv.dev/vulnerability/GHSA-vq59-x6mq-4wgw","https://nvd.nist.gov/vuln/detail/CVE-2019-11512","https://github.com/contao/contao/commit/87d92f823b08b91a0aeb522284537c8afcdb8aba","https://contao.org/en/news/security-vulnerability-cve-2019-11512.html","https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2019-11512.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2019-11512.yaml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-vq59-x6mq-4wgw#Packagist/contao/core-bundle","url":"https://osv.dev/vulnerability/GHSA-vq59-x6mq-4wgw"}],"summary":"Contao SQL injection in the file manager"}