Packagist/passbolt/passbolt_api: high 7.2
Passbolt API Stored XSS on first/last name during setup
Action: Upgrade passbolt/passbolt_api to 2.11.0 or later.
composer require passbolt/passbolt_api:2.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.11.0 | - |
Fixed versions
| 2.11.0 |
Sources
- osv: GHSA-2f46-4xjm-73x5
- https://github.com/passbolt/passbolt_api/commit/6135b483f72c6853e6085e329f5f8d7be60c9933
- https://github.com/FriendsOfPHP/security-advisories/blob/master/passbolt/passbolt_api/2019-08-07-1.yaml
- https://github.com/passbolt/passbolt_api
- https://github.com/passbolt/passbolt_api/blob/master/CHANGELOG.md#2110---2019-08-08
- https://www.passbolt.com/incidents/20190807_multiple_vulnerabilities
published · modified · JSON