Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Sylius Component: Syliusresourcebundle Clear all filters
TI-2020-11916 CVE-2020-15143 · GHSA-p4pj-9g59-4ppv

Remote Code Execution in SyliusResourceBundle

Priority MEDIUM 42

In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, rrequest parameters injected inside an expression evaluated by `symfony/expression-language` package haven't been sanitized properly.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01914 Published 2020-08-19 Fixed in 1.3.14, 1.4.7 +2 CWE-74
TI-2020-11918 CVE-2020-15146 · GHSA-h6m7-j4h3-9rf5

Remote Code Execution in SyliusResourceBundle

Priority MEDIUM 45

In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, request parameters injected inside an expression evaluated by `symfony/expression-language` package haven't been sanitized properly.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.02149 Published 2020-08-19 Fixed in 1.3.14, 1.4.7 +2 CWE-74