{"action":"Upgrade joomla/session to 1.3.1 or later.","affected":[{"fixed":"1.3.1","introduced":"0"}],"component":"joomla/session","cve_ids":["CVE-2015-8566"],"ecosystem":"Packagist","epss":0.08455,"exploited":false,"fixed_versions":["1.3.1"],"ghsa_id":"GHSA-wwfh-28hx-w2r2","id":"tcs_01M5KFAE60DHYE4N5W8T74QSDW","modified_at":"2024-12-08T05:28:44.055513Z","published_at":"2022-05-17T04:00:55Z","references":["https://osv.dev/vulnerability/GHSA-wwfh-28hx-w2r2","https://nvd.nist.gov/vuln/detail/CVE-2015-8566","https://developer.joomla.org/security-centre/637-20151205-session-remote-code-execution-vulnerability.html","https://github.com/FriendsOfPHP/security-advisories/blob/master/joomla/session/CVE-2015-8566.yaml","https://github.com/joomla-framework/session","https://web.archive.org/web/20160603093633/http://www.securityfocus.com/bid/79197"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-wwfh-28hx-w2r2","url":"https://osv.dev/vulnerability/GHSA-wwfh-28hx-w2r2"}],"summary":"Joomla! Framework Remote Code Injection Vulnerability"}