Packagist/ezsystems/ezfind-ls: high
Cross-site Scripting in eZFind spellcheck
Action: Upgrade ezsystems/ezfind-ls to 5.3.6.1 or later.
composer require ezsystems/ezfind-ls:2017.12.0.1composer require ezsystems/ezfind-ls:5.4.11.1composer require ezsystems/ezfind-ls:5.3.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2017.12.0 | 2017.12.0.1 | - |
| 5.4.0 | 5.4.11.1 | - |
| 5.3.0 | 5.3.6.1 | - |
Fixed versions
| 2017.12.0.1 | 5.4.11.1 | 5.3.6.1 |
Sources
- osv: GHSA-9cq2-pcgr-8h62
- https://github.com/ezsystems/ezfind/commit/51c17ea9b1231c20db8221f34d01c649060f1e91
- https://github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezfind-ls/2019-05-23-1.yaml
- https://github.com/ezsystems/ezfind
- https://share.ez.no/community-project/security-advisories/ezsa-2019-003-xss-in-ezfind-spellcheck
- https://web.archive.org/web/20210614183107/https://share.ez.no/community-project/security-advisories/ezsa-2019-003-xss-in-ezfind-spellcheck
published · modified · JSON