{"action":"Upgrade sulu/sulu to 1.6.44 or later.","affected":[{"fixed":"1.6.44","introduced":"0"},{"fixed":"2.2.18","introduced":"2.0.0"},{"fixed":"2.3.8","introduced":"2.3.0"},{"fixed":"2.4.0","introduced":"2.4.0-RC1"}],"component":"sulu/sulu","cve_ids":["CVE-2021-43836"],"ecosystem":"Packagist","epss":0.02047,"exploited":false,"fixed_versions":["1.6.44","2.2.18","2.3.8","2.4.0"],"ghsa_id":"GHSA-vx6j-pjrh-vgjh","id":"tcs_01M5KF9HJK5ECV2E2CBD4Y89DA","modified_at":"2026-07-08T06:28:30.986811478Z","published_at":"2021-12-15T22:54:20Z","references":["https://osv.dev/vulnerability/GHSA-vx6j-pjrh-vgjh","https://github.com/sulu/sulu/security/advisories/GHSA-vx6j-pjrh-vgjh","https://nvd.nist.gov/vuln/detail/CVE-2021-43836","https://github.com/sulu/sulu/commit/9c948f9ce350c68b53af8c3910e2cefc7f722b54","https://github.com/sulu/sulu"],"severity":{"label":"high","score":8.5},"sources":[{"source":"osv","source_id":"GHSA-vx6j-pjrh-vgjh","url":"https://osv.dev/vulnerability/GHSA-vx6j-pjrh-vgjh"}],"summary":"PHP file inclusion in the Sulu admin panel"}