{"action":"Upgrade silverstripe/framework to 3.5.8 or later.","affected":[{"fixed":"3.5.8","introduced":"3.5.7-rc1"},{"fixed":"3.6.6","introduced":"3.6.0-rc1"},{"fixed":"4.0.4","introduced":"4.0.0-rc1"},{"fixed":"4.1.1","introduced":"4.1.0-rc1"}],"component":"silverstripe/framework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["3.5.8","3.6.6","4.0.4","4.1.1"],"ghsa_id":"GHSA-xpff-c35g-j3cr","id":"tcs_01M5KFB7TD22DH85MFY8M9A64E","modified_at":"2024-12-02T05:43:12.514977Z","published_at":"2024-05-27T22:28:13Z","references":["https://osv.dev/vulnerability/GHSA-xpff-c35g-j3cr","https://github.com/silverstripe/silverstripe-framework/commit/577138882163e4b8782ea043487944d30d88e753","https://github.com/silverstripe/silverstripe-framework/commit/e409d6f673c49846086b23677aecdc3fde5fc4d5","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2018-001-1.yaml","https://github.com/silverstripe/silverstripe-framework","https://www.silverstripe.org/download/security-releases/ss-2018-001"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-xpff-c35g-j3cr","url":"https://osv.dev/vulnerability/GHSA-xpff-c35g-j3cr"}],"summary":"silverstripe/framework Privilege Escalation Risk in Member Edit form"}