{"action":"Upgrade elefant/cms to 2.0.7 or later.","affected":[{"fixed":"2.0.7","introduced":"0"}],"component":"elefant/cms","cve_ids":["CVE-2018-16975"],"ecosystem":"Packagist","epss":0.03727,"exploited":false,"fixed_versions":["2.0.7"],"ghsa_id":"GHSA-x2w2-qgv6-8xrm","id":"tcs_01M5KFAJPFDBJPAFE4JR15FPDA","modified_at":"2024-04-23T23:11:43.195805Z","published_at":"2022-05-13T01:19:19Z","references":["https://osv.dev/vulnerability/GHSA-x2w2-qgv6-8xrm","https://nvd.nist.gov/vuln/detail/CVE-2018-16975","https://github.com/jbroadway/elefant/issues/286","https://github.com/jbroadway/elefant/commit/0795ab57c7ffa53ff4af57e229f6d9680fa54a21","https://github.com/jbroadway/elefant","https://github.com/jbroadway/elefant/releases/tag/elefant_2_0_7_stable"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-x2w2-qgv6-8xrm","url":"https://osv.dev/vulnerability/GHSA-x2w2-qgv6-8xrm"}],"summary":"Elefant CMS PHP Code Execution Vulnerability"}