{"action":"Upgrade tribalsystems/zenario to 8.8.53370 or later.","affected":[{"fixed":"8.8.53370","introduced":"0"}],"component":"tribalsystems/zenario","cve_ids":["CVE-2021-26830"],"ecosystem":"Packagist","epss":0.04572,"exploited":false,"fixed_versions":["8.8.53370"],"ghsa_id":"GHSA-w4f3-7f7c-x652","id":"tcs_01M5KF9QGHXCY9Q2TNPTCRG1GA","modified_at":"2024-02-16T08:17:27.314636Z","published_at":"2022-03-18T17:49:01Z","references":["https://osv.dev/vulnerability/GHSA-w4f3-7f7c-x652","https://nvd.nist.gov/vuln/detail/CVE-2021-26830","https://github.com/TribalSystems/Zenario/commit/2c82a4d126c8446106347ef603b157f2d4175fd1","https://edhunter484.medium.com/blind-sql-injection-on-zenario-cms-b58b6820c32d","https://github.com/TribalSystems/Zenario/releases/tag/8.8.53370","https://www.exploit-db.com/exploits/49642"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-w4f3-7f7c-x652","url":"https://osv.dev/vulnerability/GHSA-w4f3-7f7c-x652"}],"summary":"SQL Injection in tribalsystems/zenario"}