{"url":"http://public2.vulnerablecode.io/api/packages/211656?format=json","purl":"pkg:composer/akeneo/pim-community-dev@1.4.20","type":"composer","namespace":"akeneo","name":"pim-community-dev","version":"1.4.20","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"1.4.28","latest_non_vulnerable_version":"6.0.53","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/38689?format=json","vulnerability_id":"VCID-jt1t-hxm4-eub3","summary":"OS Command Injection\nAkeneo PIM is vulnerable to shell injection in the mass edition, resulting in remote code execution.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2017-1000009","reference_id":"","reference_type":"","scores":[{"value":"0.10457","scoring_system":"epss","scoring_elements":"0.93368","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2017-1000009"},{"reference_url":"https://github.com/akeneo/pim-community-dev","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/akeneo/pim-community-dev"},{"reference_url":"https://github.com/akeneo/pim-community-dev/blob/1.5/CHANGELOG-1.5.md#bug-fixes-2","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/akeneo/pim-community-dev/blob/1.5/CHANGELOG-1.5.md#bug-fixes-2"},{"reference_url":"https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.4.md#bug-fixes","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.4.md#bug-fixes"},{"reference_url":"https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.6.md#bug-fixes-2","reference_id":"","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.6.md#bug-fixes-2"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000009","reference_id":"CVE-2017-1000009","reference_type":"","scores":[{"value":"9.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"CRITICAL","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000009"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/53801?format=json","purl":"pkg:composer/akeneo/pim-community-dev@1.4.28","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.28"},{"url":"http://public2.vulnerablecode.io/api/packages/53802?format=json","purl":"pkg:composer/akeneo/pim-community-dev@1.5.15","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.15"},{"url":"http://public2.vulnerablecode.io/api/packages/53803?format=json","purl":"pkg:composer/akeneo/pim-community-dev@1.6.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.6.6"}],"aliases":["CVE-2017-1000009","GHSA-q8cr-xphm-7gfv"],"risk_score":4.5,"exploitability":"0.5","weighted_severity":"9.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-jt1t-hxm4-eub3"}],"fixing_vulnerabilities":[],"risk_score":"4.5","resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.20"}