{"action":"Upgrade contao/core to 2.11.14 or later.","affected":[{"fixed":"2.11.14","introduced":"2.0.0"},{"fixed":"3.2.5","introduced":"3.0.0"}],"component":"contao/core","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.11.14","3.2.5"],"ghsa_id":"GHSA-wq43-8r5p-w3mc","id":"tcs_01M5KFA9HJQB1B9SVXJ5M3GB7G","modified_at":"2024-11-29T05:39:58.333024Z","published_at":"2024-05-15T18:31:04Z","references":["https://osv.dev/vulnerability/GHSA-wq43-8r5p-w3mc","https://github.com/contao/core/issues/6695","https://github.com/contao/core/commit/d67c46c1f1283134e3050244cfdda0ef26fa5cd4","https://github.com/contao/core/commit/f939b5be8a0048ef779def3289e2072febef1b37","https://contao.org/en/news/major-security-hole-found-in-contao.html","https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/2014-02-13.yaml"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-wq43-8r5p-w3mc","url":"https://osv.dev/vulnerability/GHSA-wq43-8r5p-w3mc"}],"summary":"contao/core PHP object injection vulnerability allows for arbitrary code execution"}