{"action":"Upgrade @plone/volto to 15.0.0-alpha.0 or later.","affected":[{"fixed":"15.0.0-alpha.0","introduced":"14.0.0-alpha.6"}],"component":"@plone/volto","cve_ids":["CVE-2022-24740"],"ecosystem":"npm","epss":0.00589,"exploited":false,"fixed_versions":["15.0.0-alpha.0"],"ghsa_id":"GHSA-cfhh-xgwq-5r67","id":"tcs_01M5KFJJ080WGJ41J5MB09JX80","modified_at":"2023-11-08T04:08:34.635747Z","published_at":"2022-03-14T22:15:19Z","references":["https://osv.dev/vulnerability/GHSA-cfhh-xgwq-5r67","https://github.com/plone/volto/security/advisories/GHSA-cfhh-xgwq-5r67","https://nvd.nist.gov/vuln/detail/CVE-2022-24740","https://github.com/plone/volto/pull/3051","https://github.com/plone/volto"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"GHSA-cfhh-xgwq-5r67","url":"https://osv.dev/vulnerability/GHSA-cfhh-xgwq-5r67"}],"summary":"Sudden swap of user auth tokens in Volto"}