Packagist/sylius/admin-bundle: medium 6.5
Sylius Admin Bundle Cross-Site Request Forgery vulnerability
Action: Upgrade sylius/admin-bundle to 1.0.17 or later.
composer require sylius/admin-bundle:1.0.17composer require sylius/admin-bundle:1.1.9composer require sylius/admin-bundle:1.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.0.17 | - |
| 1.1.0 | 1.1.9 | - |
| 1.2.0 | 1.2.2 | - |
Fixed versions
| 1.0.17 | 1.1.9 | 1.2.2 |
Sources
- osv: GHSA-945h-6vcv-pc8h
- https://github.com/Sylius/SyliusAdminBundle/commit/79c2d963bed61411b1eef15715a74d2d96b91884
- https://github.com/FriendsOfPHP/security-advisories/blob/master/sylius/admin-bundle/2018-07-09.yaml
- https://github.com/Sylius/SyliusAdminBundle
- https://sylius.com/blog/csrf-vulnerability-in-admin-panel
published · modified · JSON