{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.9"}],"component":"pyrocms/pyrocms","cve_ids":["CVE-2023-29689"],"ecosystem":"Packagist","epss":0.53463,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-w7vm-4v3j-vgpw","id":"tcs_01M5KF9WA4RBEMQCESCB3DKFCY","modified_at":"2024-12-03T06:11:42.473836Z","published_at":"2023-08-04T15:30:15Z","references":["https://osv.dev/vulnerability/GHSA-w7vm-4v3j-vgpw","https://nvd.nist.gov/vuln/detail/CVE-2023-29689","https://cupc4k3.lol/ssti-leads-to-rce-on-pyrocms-7515be27c811","https://github.com/pyrocms/pyrocms","http://packetstormsecurity.com/files/174088/Pyro-CMS-3.9-Server-Side-Template-Injection.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-w7vm-4v3j-vgpw","url":"https://osv.dev/vulnerability/GHSA-w7vm-4v3j-vgpw"}],"summary":"PyroCMS remote code execution vulnerability"}