Packagist/sulu/sulu CVE-2024-24807: low, EPSS 0.52%
Sulu HTML Injection via Autocomplete Suggestion
Action: Upgrade sulu/sulu to 2.4.16 or later.
composer require sulu/sulu:2.4.16composer require sulu/sulu:2.5.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.4.16 | - |
| 2.5.0 | 2.5.12 | - |
Fixed versions
| 2.4.16 | 2.5.12 |
Sources
- osv: GHSA-gfrh-gwqc-63cv
- https://github.com/sulu/sulu/security/advisories/GHSA-gfrh-gwqc-63cv
- https://github.com/sulu/sulu/commit/570c78124ae97cb02469141b86ac69d9fb2cb147
- https://github.com/sulu/sulu
CVE-2024-24807 · published · modified · JSON