{"action":"Upgrade UmbracoCms.Web to 7.7.3 or later.","affected":[{"fixed":"7.7.3","introduced":"0"}],"component":"UmbracoCms.Web","cve_ids":["CVE-2017-15280"],"ecosystem":"NuGet","epss":0.0106,"exploited":false,"fixed_versions":["7.7.3"],"ghsa_id":"GHSA-h2vq-7gf2-qw9v","id":"tcs_01M5N8Q2SFR096V2Y0ERA9NNDJ","modified_at":"2023-11-08T03:58:56.774535Z","published_at":"2022-05-17T00:30:20Z","references":["https://osv.dev/vulnerability/GHSA-h2vq-7gf2-qw9v","https://nvd.nist.gov/vuln/detail/CVE-2017-15280","https://github.com/umbraco/Umbraco-CMS/commit/5dde2efe0d2b3a47d17439e03acabb7ea2befb64","https://github.com/umbraco/Umbraco-CMS","https://github.com/umbraco/Umbraco-CMS/blob/release-7.7.3/src/Umbraco.Web/Umbraco.Web.csproj","http://issues.umbraco.org/issue/U4-10506"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-h2vq-7gf2-qw9v","url":"https://osv.dev/vulnerability/GHSA-h2vq-7gf2-qw9v"}],"summary":"Umbraco CMS XXE Vulnerability"}