{"action":"Upgrade polaris-website to 1.1.1 or later.","affected":[{"fixed":"1.1.1","introduced":"0"}],"component":"polaris-website","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.1.1"],"ghsa_id":"GHSA-whrh-9j4q-g7ph","id":"tcs_01M5KGF6V4TAAHFPH73Y5XRMEN","modified_at":"2021-09-23T18:38:11Z","published_at":"2020-08-05T21:43:19Z","references":["https://osv.dev/vulnerability/GHSA-whrh-9j4q-g7ph","https://github.com/polaris-rbx/Polaris-React/security/advisories/GHSA-whrh-9j4q-g7ph","https://github.com/polaris-rbx/Polaris-React/commit/b64673d91e83c0737616a0770d8208727730808b","https://github.com/polaris-rbx/Polaris-React","https://medium.com/cross-site-request-forgery-csrf/double-submit-cookie-pattern-65bb71d80d9f","https://owasp.org/www-community/attacks/csrf","https://snyk.io/vuln/SNYK-JS-POLARISWEBSITE-597473","https://www.barracuda.com/glossary/csrf"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-whrh-9j4q-g7ph","url":"https://osv.dev/vulnerability/GHSA-whrh-9j4q-g7ph"}],"summary":"CSRF Vulnerability in polaris-website"}