{"action":"Upgrade typo3/cms-core to 8.7.57 or later.","affected":[{"fixed":"8.7.57","introduced":"8.0.0"},{"fixed":"9.5.46","introduced":"9.0.0"},{"fixed":"10.4.43","introduced":"10.0.0"},{"fixed":"11.5.35","introduced":"11.0.0"},{"fixed":"12.4.11","introduced":"12.0.0"},{"fixed":"13.0.1","introduced":"13.0.0"}],"component":"typo3/cms-core","cve_ids":["CVE-2023-30451"],"ecosystem":"Packagist","epss":0.01161,"exploited":false,"fixed_versions":["8.7.57","9.5.46","10.4.43","11.5.35","12.4.11","13.0.1"],"ghsa_id":"GHSA-w6x2-jg8h-p6mp","id":"tcs_01M5KF9V1R3D61GKSANGY304TS","modified_at":"2024-02-20T15:21:13.092100Z","published_at":"2024-02-13T19:08:10Z","references":["https://osv.dev/vulnerability/GHSA-w6x2-jg8h-p6mp","https://github.com/TYPO3/typo3/security/advisories/GHSA-w6x2-jg8h-p6mp","https://nvd.nist.gov/vuln/detail/CVE-2023-30451","https://github.com/TYPO3/typo3/commit/205115cca3d67594a12d0195c937da0e51eb494a","https://github.com/TYPO3/typo3/commit/78fb9287a2f0487c39288070cb0493a5265f1789","https://github.com/TYPO3/typo3/commit/accf537c7379b4359bc0f957c4d0c07baddd710a","https://github.com/TYPO3/typo3","https://typo3.org/security/advisory/typo3-core-sa-2024-001","http://packetstormsecurity.com/files/176274/TYPO3-11.5.24-Path-Traversal.html"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-w6x2-jg8h-p6mp","url":"https://osv.dev/vulnerability/GHSA-w6x2-jg8h-p6mp"}],"summary":"Path Traversal in TYPO3 File Abstraction Layer Storages"}