{"action":"Upgrade pimcore/admin-ui-classic-bundle to 1.7.4 or later.","affected":[{"fixed":"1.7.4","introduced":"0"}],"component":"pimcore/admin-ui-classic-bundle","cve_ids":["CVE-2025-24980"],"ecosystem":"Packagist","epss":0.00519,"exploited":false,"fixed_versions":["1.7.4"],"ghsa_id":"GHSA-vr5f-php7-rg24","id":"tcs_01M5KF9D6E8DH58859VQN2YBED","modified_at":"2025-02-11T17:25:44.018147Z","published_at":"2025-02-07T20:27:43Z","references":["https://osv.dev/vulnerability/GHSA-vr5f-php7-rg24","https://github.com/pimcore/admin-ui-classic-bundle/security/advisories/GHSA-vr5f-php7-rg24","https://nvd.nist.gov/vuln/detail/CVE-2025-24980","https://github.com/pimcore/admin-ui-classic-bundle/pull/808","https://github.com/pimcore/admin-ui-classic-bundle/commit/96ae555578c3b4df368092d71e07a6c4ddf8fbe9","https://github.com/pimcore/admin-ui-classic-bundle"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-vr5f-php7-rg24","url":"https://osv.dev/vulnerability/GHSA-vr5f-php7-rg24"},{"source":"nvd","source_id":"CVE-2025-24980","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24980"}],"summary":"Pimcore Admin Classic Bundle allows user enumeration"}