Packagist/easycorp/easyadmin-bundle: medium 5.3
EasyAdminBundle has path traversal and reflected XSS in Flag and Icon Twig components
Action: Upgrade easycorp/easyadmin-bundle to 4.29.10 or later.
composer require easycorp/easyadmin-bundle:4.29.10composer require easycorp/easyadmin-bundle:5.0.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.29.10 | - |
| 5.0.0 | 5.0.10 | - |
Fixed versions
| 4.29.10 | 5.0.10 |
Sources
- osv: GHSA-2wwr-9x6f-88gp
- https://github.com/EasyCorp/EasyAdminBundle/security/advisories/GHSA-2wwr-9x6f-88gp
- https://github.com/EasyCorp/EasyAdminBundle
published · modified · JSON