{"action":"Upgrade redaxo/source to 5.20.1 or later.","affected":[{"fixed":"5.20.1","introduced":"0"}],"component":"redaxo/source","cve_ids":["CVE-2025-64050"],"ecosystem":"Packagist","epss":0.00908,"exploited":false,"fixed_versions":["5.20.1"],"ghsa_id":"GHSA-xj9j-gjxg-7jvq","id":"tcs_01M5KFB459VCMAC9FYBWAQWPSN","modified_at":"2025-11-26T22:27:49.952831Z","published_at":"2025-11-25T18:32:22Z","references":["https://osv.dev/vulnerability/GHSA-xj9j-gjxg-7jvq","https://nvd.nist.gov/vuln/detail/CVE-2025-64050","https://github.com/redaxo/redaxo/pull/6372/commits/bc96462e20f7e651b2e6c3bb59d141d5cb09af0f","https://drive.google.com/drive/folders/1Via4r4wn5zCcBllWmHpxYweCPgcbN0bz?usp=sharing","https://github.com/redaxo/redaxo","https://github.com/vettrivel007/CVE-Disclosures/blob/main/CVE-2025-64050.md"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-xj9j-gjxg-7jvq","url":"https://osv.dev/vulnerability/GHSA-xj9j-gjxg-7jvq"}],"summary":"REDAXO CMS is vulnerable to RCE attack through its template management component"}