{"action":"Upgrade prestashop/prestashop to 1.7.2.5 or later.","affected":[{"fixed":"1.7.2.5","introduced":"0"}],"component":"prestashop/prestashop","cve_ids":["CVE-2018-20717"],"ecosystem":"Packagist","epss":0.0269,"exploited":false,"fixed_versions":["1.7.2.5"],"ghsa_id":"GHSA-xx67-2j3v-h76p","id":"tcs_01M5KFBF0FX5D8NTGC6DP3P66A","modified_at":"2024-02-16T08:18:48.908847Z","published_at":"2022-05-14T01:37:11Z","references":["https://osv.dev/vulnerability/GHSA-xx67-2j3v-h76p","https://nvd.nist.gov/vuln/detail/CVE-2018-20717","https://blog.ripstech.com/2018/prestashop-remote-code-execution","https://build.prestashop.com/news/prestashop-1-7-2-5-maintenance-release","https://github.com/PrestaShop/PrestaShop"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-xx67-2j3v-h76p","url":"https://osv.dev/vulnerability/GHSA-xx67-2j3v-h76p"}],"summary":"PrestaShop PHP Object Injection"}