{"action":"Upgrade Umbraco.CMS to 7.4.0 or later.","affected":[{"fixed":"7.4.0","introduced":"0"}],"component":"Umbraco.CMS","cve_ids":["CVE-2015-8813"],"ecosystem":"NuGet","epss":0.11154,"exploited":false,"fixed_versions":["7.4.0"],"ghsa_id":"GHSA-x34j-wxq8-7vcm","id":"tcs_01M5N94M6QT812ADKEMERKRY2S","modified_at":"2023-11-08T03:58:03.196383Z","published_at":"2022-05-17T02:56:23Z","references":["https://osv.dev/vulnerability/GHSA-x34j-wxq8-7vcm","https://nvd.nist.gov/vuln/detail/CVE-2015-8813","https://github.com/umbraco/Umbraco-CMS/commit/924a016ffe7ae7ea6d516c07a7852f0095eddbce","https://web.archive.org/web/20230608160721/https://issues.umbraco.org/issue/U4-7457","http://www.openwall.com/lists/oss-security/2016/02/16/10","http://www.openwall.com/lists/oss-security/2016/02/17/1","http://www.openwall.com/lists/oss-security/2016/02/17/5","http://www.openwall.com/lists/oss-security/2016/02/18/8"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-x34j-wxq8-7vcm","url":"https://osv.dev/vulnerability/GHSA-x34j-wxq8-7vcm"}],"summary":"Umbraco CMS vulnerable to CSRF"}