{"action":"Upgrade contao/core to 2.11.17 or later.","affected":[{"fixed":"2.11.17","introduced":"2.0.0"},{"fixed":"3.2.9","introduced":"3.0.0"}],"component":"contao/core","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.11.17","3.2.9"],"ghsa_id":"GHSA-wxxw-5gq6-j2g5","id":"tcs_01M5KFAGJFHQFY6YY6A9C6SGY7","modified_at":"2024-11-29T05:35:05.118832Z","published_at":"2024-05-15T18:31:02Z","references":["https://osv.dev/vulnerability/GHSA-wxxw-5gq6-j2g5","https://github.com/contao/core/issues/6855","https://github.com/contao/core/commit/d45503568751a868193929ef349a49ae5e6686f0","https://github.com/contao/core/commit/d4a14f167e0cbb2e77c7829299e5b36f55c1ebce","https://c-c-a.org/aktuelles/news/details/eine-neue-kritische-sicherheitsluecke-in-contao-entdeckt","https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core/2014-04-07.yaml","https://web.archive.org/web/20240214121817/https://contao.org/en/news/new-security-hole-found-in-contao"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-wxxw-5gq6-j2g5","url":"https://osv.dev/vulnerability/GHSA-wxxw-5gq6-j2g5"}],"summary":"contao/core Insufficient input validation allows for code injection and remote execution"}