{"action":"Upgrade thorsten/phpmyfaq to 4.0.0 or later.","affected":[{"fixed":"4.0.0","introduced":"0"}],"component":"thorsten/phpmyfaq","cve_ids":["CVE-2024-54141"],"ecosystem":"Packagist","epss":0.00494,"exploited":false,"fixed_versions":["4.0.0"],"ghsa_id":"GHSA-vrjr-p3xp-xx2x","id":"tcs_01M5KF9DV0RT0CSGQ3PVSDWCXP","modified_at":"2024-12-06T18:42:24.680848Z","published_at":"2024-12-06T18:22:52Z","references":["https://osv.dev/vulnerability/GHSA-vrjr-p3xp-xx2x","https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-vrjr-p3xp-xx2x","https://nvd.nist.gov/vuln/detail/CVE-2024-54141","https://github.com/thorsten/phpMyFAQ/commit/b9289a0b2233df864361c131cd177b6715fbb0fe","https://github.com/thorsten/phpMyFAQ"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-vrjr-p3xp-xx2x","url":"https://osv.dev/vulnerability/GHSA-vrjr-p3xp-xx2x"}],"summary":"phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available"}