Packagist/sylius/sylius CVE-2020-15245: medium 4.3, EPSS 0.63%
Ability to switch customer email address on account detail page and stay verified
Action: Upgrade sylius/sylius to 1.6.9 or later.
composer require sylius/sylius:1.7.9composer require sylius/sylius:1.8.3composer require sylius/sylius:1.6.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.0 | 1.7.9 | - |
| 1.8.0 | 1.8.3 | - |
| 1.0.0 | 1.6.9 | - |
Fixed versions
| 1.7.9 | 1.8.3 | 1.6.9 |
Sources
- osv: GHSA-6gw4-x63h-5499
- https://github.com/Sylius/Sylius/security/advisories/GHSA-6gw4-x63h-5499
- https://nvd.nist.gov/vuln/detail/CVE-2020-15245
- https://github.com/Sylius/Sylius/commit/60636d711a4011e8694d10d201b53632c7e8ecaf
- https://github.com/FriendsOfPHP/security-advisories/blob/master/sylius/sylius/CVE-2020-15245.yaml
- https://github.com/Sylius/Sylius
CVE-2020-15245 · published · modified · JSON