{"action":"Upgrade genix/cms to 1.1.2 or later.","affected":[{"fixed":"1.1.2","introduced":"0"}],"component":"genix/cms","cve_ids":["CVE-2017-8827"],"ecosystem":"Packagist","epss":0.01618,"exploited":false,"fixed_versions":["1.1.2"],"ghsa_id":"GHSA-wm7g-rmgg-9837","id":"tcs_01M5KFA6JAK1DCQM2NDXSQBD79","modified_at":"2024-04-25T21:57:35.650863Z","published_at":"2022-05-17T02:46:02Z","references":["https://osv.dev/vulnerability/GHSA-wm7g-rmgg-9837","https://nvd.nist.gov/vuln/detail/CVE-2017-8827","https://github.com/semplon/GeniXCMS/issues/75","https://github.com/semplon/GeniXCMS/commit/f7b4a8278cdcf29ecf7f1eaa1b9f088d505ca61a","https://github.com/GeniXCMS/GeniXCMS"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-wm7g-rmgg-9837","url":"https://osv.dev/vulnerability/GHSA-wm7g-rmgg-9837"}],"summary":"GeniXCMS Arbitrary User Password Reset Vulnerability"}