{"action":"Upgrade typo3/cms-core to 8.7.27 or later.","affected":[{"fixed":"8.7.27","introduced":"8.0.0"},{"fixed":"9.5.8","introduced":"9.0.0"}],"component":"typo3/cms-core","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["8.7.27","9.5.8"],"ghsa_id":"GHSA-x428-565f-8xj2","id":"tcs_01M5KFAMKVYZCTS4BAWJQ271KF","modified_at":"2024-12-06T05:39:47.964874Z","published_at":"2024-05-30T18:27:24Z","references":["https://osv.dev/vulnerability/GHSA-x428-565f-8xj2","https://github.com/TYPO3-CMS/core/commit/3a99a0877de6ad9cb39ba73146292b90e13294db","https://github.com/TYPO3-CMS/core/commit/822e62ec267fbe3c70a26f1c4f73f47fc615c930","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-06-25-4.yaml","https://github.com/TYPO3-CMS/core","https://typo3.org/security/advisory/typo3-core-sa-2019-019"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-x428-565f-8xj2","url":"https://osv.dev/vulnerability/GHSA-x428-565f-8xj2"}],"summary":"TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API"}