{"action":"Upgrade sscms to 6.12 or later.","affected":[{"fixed":"6.12","introduced":"0"}],"component":"sscms","cve_ids":["CVE-2019-11401"],"ecosystem":"NuGet","epss":0.0282,"exploited":false,"fixed_versions":["6.12"],"ghsa_id":"GHSA-ff4w-8chr-w2x9","id":"tcs_01M5N8MBYFCF1VJNJ5CDNAQC34","modified_at":"2024-02-16T07:58:24.434044Z","published_at":"2022-05-24T16:44:03Z","references":["https://osv.dev/vulnerability/GHSA-ff4w-8chr-w2x9","https://nvd.nist.gov/vuln/detail/CVE-2019-11401","https://github.com/siteserver/cms/issues/1858","https://github.com/siteserver/cms/commit/a7edb9ce3f9b52be3d18fa8a0e44931264e22436#diff-c8a06aaffb97eb2f4c587c1786906edd49dea574d063f74a59d9653ee0d5718b","https://github.com/siteserver/cms"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-ff4w-8chr-w2x9","url":"https://osv.dev/vulnerability/GHSA-ff4w-8chr-w2x9"}],"summary":"SiteServer CMS RCE via unsafe file upload"}