{"action":"Upgrade ipl/web to 0.10.1 or later.","affected":[{"fixed":"0.10.1","introduced":"0"}],"component":"ipl/web","cve_ids":["CVE-2024-41811"],"ecosystem":"Packagist","epss":0.00184,"exploited":false,"fixed_versions":["0.10.1"],"ghsa_id":"GHSA-w9pg-7c3h-fc8j","id":"tcs_01M5KF9Z4Z7GG6B24QDQP51ESD","modified_at":"2024-08-06T14:55:49.722388Z","published_at":"2024-08-05T14:39:09Z","references":["https://osv.dev/vulnerability/GHSA-w9pg-7c3h-fc8j","https://github.com/Icinga/ipl-web/security/advisories/GHSA-w9pg-7c3h-fc8j","https://nvd.nist.gov/vuln/detail/CVE-2024-41811","https://github.com/Icinga/ipl-web/commit/492336fdb57a5bb0881ed642ab36f5841337571e","https://github.com/Icinga/ipl-web"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"GHSA-w9pg-7c3h-fc8j","url":"https://osv.dev/vulnerability/GHSA-w9pg-7c3h-fc8j"}],"summary":"ipl/web's `ipl\\Web\\Common\\CsrfCounterMeasure` is susceptible to CSRF"}