{"action":"Upgrade FastReport.OpenSource to 2020.4.0 or later.","affected":[{"fixed":"2020.4.0","introduced":"0"}],"component":"FastReport.OpenSource","cve_ids":["CVE-2020-27998"],"ecosystem":"NuGet","epss":0.02379,"exploited":false,"fixed_versions":["2020.4.0"],"ghsa_id":"GHSA-v726-3vg9-cp34","id":"tcs_01M5N914SPD4K5XK6Q1BCMHWHW","modified_at":"2023-11-08T04:03:22.735705Z","published_at":"2021-08-02T17:28:16Z","references":["https://osv.dev/vulnerability/GHSA-v726-3vg9-cp34","https://nvd.nist.gov/vuln/detail/CVE-2020-27998","https://github.com/FastReports/FastReport/pull/206","https://github.com/FastReports/FastReport/compare/v2020.3.0...v2020.4.0","https://opensource.fast-report.com/2020/09/report-script-security.html","https://securitylab.github.com/advisories/GHSL-2020-143-FastReportsInc-FastReports"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-v726-3vg9-cp34","url":"https://osv.dev/vulnerability/GHSA-v726-3vg9-cp34"}],"summary":"Missing Authorization in FastReport"}