Packagist/sylius/resource-bundle: medium 6.5
Sylius Resource Bundle Cross-Site Request Forgery vulnerability
Action: Upgrade sylius/resource-bundle to 1.0.17 or later.
composer require sylius/resource-bundle:1.0.17composer require sylius/resource-bundle:1.1.9composer require sylius/resource-bundle:1.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.0.17 | - |
| 1.1.0 | 1.1.9 | - |
| 1.2.0 | 1.2.2 | - |
Fixed versions
| 1.0.17 | 1.1.9 | 1.2.2 |
Sources
- osv: GHSA-65v7-wg35-2qpm
- https://github.com/Sylius/SyliusResourceBundle/commit/9720ac5a0a39ea2c2a395ef16a94a00aa86c418b
- https://github.com/FriendsOfPHP/security-advisories/blob/master/sylius/sylius/2018-07-09.yaml
- https://github.com/Sylius/SyliusResourceBundle
- https://sylius.com/blog/csrf-vulnerability-in-admin-panel
published · modified · JSON