{"action":"Upgrade kiwitcms to 12.2 or later.","affected":[{"fixed":"12.2","introduced":"0"}],"component":"kiwitcms","cve_ids":["CVE-2023-30613"],"ecosystem":"PyPI","epss":0.01024,"exploited":false,"fixed_versions":["12.2"],"ghsa_id":"GHSA-fwcf-753v-fgcj","id":"tcs_01M5KFG8PJZX3CXS5WKS60NBQ0","modified_at":"2026-07-07T17:56:19.274650657Z","published_at":"2023-04-24T22:44:12Z","references":["https://osv.dev/vulnerability/GHSA-fwcf-753v-fgcj","https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-fwcf-753v-fgcj","https://nvd.nist.gov/vuln/detail/CVE-2023-30613","https://github.com/kiwitcms/Kiwi","https://huntr.com/bounties/c30d3503-600d-4d00-9571-98826a51f12c","https://huntr.dev/bounties/c30d3503-600d-4d00-9571-98826a51f12c","https://kiwitcms.org/blog/kiwi-tcms-team/2023/04/23/kiwi-tcms-122"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-fwcf-753v-fgcj","url":"https://osv.dev/vulnerability/GHSA-fwcf-753v-fgcj"}],"summary":"Unrestricted file upload in kiwi TCMS"}