{"action":"Upgrade akeneo/pim-community-dev to 5.0.119 or later.","affected":[{"fixed":"6.0.53","introduced":"6.0.0"},{"fixed":"5.0.119","introduced":"0"}],"component":"akeneo/pim-community-dev","cve_ids":["CVE-2022-46157"],"ecosystem":"Packagist","epss":0.01501,"exploited":false,"fixed_versions":["6.0.53","5.0.119"],"ghsa_id":"GHSA-w9wc-4xcq-8gr6","id":"tcs_01M5KF9ZDASAX0CFKDVZSD62PG","modified_at":"2023-12-06T01:02:43.009408Z","published_at":"2022-12-09T20:08:32Z","references":["https://osv.dev/vulnerability/GHSA-w9wc-4xcq-8gr6","https://github.com/akeneo/pim-community-dev/security/advisories/GHSA-w9wc-4xcq-8gr6","https://nvd.nist.gov/vuln/detail/CVE-2022-46157","https://github.com/akeneo/pim-community-dev/commit/891a2f70a9a200f199de06fe64d376d03787a81a","https://github.com/akeneo/pim-community-dev","https://github.com/akeneo/pim-community-dev/blob/b4d79bb073c8b68ea26ab227c97cc78d86c4cba1/docker/httpd.conf#L39"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-w9wc-4xcq-8gr6","url":"https://osv.dev/vulnerability/GHSA-w9wc-4xcq-8gr6"}],"summary":"Akeneo PIM Community Edition vulnerable to remote php code execution"}