{"action":"Upgrade impresscms/impresscms to 1.3.6 or later.","affected":[{"fixed":"1.3.6","introduced":"0"}],"component":"impresscms/impresscms","cve_ids":["CVE-2014-1836"],"ecosystem":"Packagist","epss":0.0364,"exploited":false,"fixed_versions":["1.3.6"],"ghsa_id":"GHSA-wcj4-ff9m-5r7g","id":"tcs_01M5KFA0AZMTJHYWCG7HQC0ZAX","modified_at":"2023-11-08T03:57:35.126843Z","published_at":"2022-05-17T04:12:03Z","references":["https://osv.dev/vulnerability/GHSA-wcj4-ff9m-5r7g","https://nvd.nist.gov/vuln/detail/CVE-2014-1836","https://github.com/ImpressCMS/impresscms/issues/914","https://github.com/pedrib/PoC/blob/master/generic/impresscms-1.3.5.txt","https://web.archive.org/web/20200228234251/http://www.securityfocus.com/bid/65279","http://community.impresscms.org/modules/smartsection/item.php?itemid=675","http://seclists.org/fulldisclosure/2014/Feb/14"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-wcj4-ff9m-5r7g","url":"https://osv.dev/vulnerability/GHSA-wcj4-ff9m-5r7g"}],"summary":"ImpressCMS Path Traversal to Arbitrary File Delete"}