{"action":"Upgrade kiwitcms to 12.3 or later.","affected":[{"fixed":"12.3","introduced":"0"}],"component":"kiwitcms","cve_ids":["CVE-2023-30628"],"ecosystem":"PyPI","epss":0.03596,"exploited":false,"fixed_versions":["12.3"],"ghsa_id":"GHSA-cw6r-6ccx-5hwx","id":"tcs_01M5KGK8G2K0R0HNB871GXEFR2","modified_at":"2024-11-21T14:57:02.609364Z","published_at":"2023-04-24T22:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-273","https://github.com/kiwitcms/enterprise/commit/e39f7e156fdaf6fec09a15ea6f4e8fec8cdbf751","https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-cw6r-6ccx-5hwx","https://github.com/kiwitcms/Kiwi/commit/834c86dfd1b2492ccad7ebbfd6304bfec895fed2","https://github.com/kiwitcms/Kiwi/blob/37bfb87696093ce0393160e2725949185cc0651d/.github/workflows/changelog.yml#L18","https://securitylab.github.com/research/github-actions-untrusted-input/"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2023-273","url":"https://osv.dev/vulnerability/PYSEC-2023-273"}],"summary":"Kiwi TCMS is an open source test management system. In kiwitcms/Kiwi v12.2 and prior and kiwitcms/enterprise v12.2 and prior,"}