{"action":"Upgrade froxlor/froxlor to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"froxlor/froxlor","cve_ids":["CVE-2023-0316"],"ecosystem":"Packagist","epss":0.0075,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-xp3g-2729-rxm3","id":"tcs_01M5KFB6YS5GJ2VCT23CXDK4BA","modified_at":"2023-11-08T04:11:07.916027Z","published_at":"2023-01-16T03:30:25Z","references":["https://osv.dev/vulnerability/GHSA-xp3g-2729-rxm3","https://nvd.nist.gov/vuln/detail/CVE-2023-0316","https://github.com/froxlor/froxlor/commit/983d9294603925018225d672795bd8b4a526f41e","https://github.com/Froxlor/Froxlor","https://huntr.dev/bounties/c190e42a-4806-47aa-aa1e-ff5d6407e244"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-xp3g-2729-rxm3","url":"https://osv.dev/vulnerability/GHSA-xp3g-2729-rxm3"}],"summary":"Froxlor is vulnerable to path traversal"}