Packagist/winter/wn-backend-module: high 8.3
Winter: ImportExportController AJAX handlers bypass granular import/export permission gate
Action: Upgrade winter/wn-backend-module to 1.2.14 or later.
composer require winter/wn-backend-module:1.2.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.14 | - |
Fixed versions
| 1.2.14 |
Sources
- osv: GHSA-fm29-4mq3-phg6
- https://github.com/wintercms/winter/security/advisories/GHSA-fm29-4mq3-phg6
- https://github.com/wintercms/winter/commit/84c81f153f2dc3e2c7b03ab14a4a3ca8456d0e4f
- https://github.com/wintercms/winter
- https://github.com/wintercms/winter/releases/tag/v1.2.14
published · modified · JSON