Packagist/sulu/sulu CVE-2024-47618: medium 6.1, EPSS 0.35%
Cross-site Scripting via uploaded SVG
Action: Upgrade sulu/sulu to 2.5.21 or later.
composer require sulu/sulu:2.5.21composer require sulu/sulu:2.6.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0-RC1 | 2.5.21 | - |
| 2.6.0-RC1 | 2.6.5 | - |
Fixed versions
| 2.5.21 | 2.6.5 |
Sources
- osv: GHSA-255w-87rh-rg44
- https://github.com/sulu/sulu/security/advisories/GHSA-255w-87rh-rg44
- https://nvd.nist.gov/vuln/detail/CVE-2024-47618
- https://github.com/sulu/sulu/commit/ca72f75eebe41ea7726624d8aea7da6c425f1eb9
- https://github.com/sulu/sulu
CVE-2024-47618 · published · modified · JSON