Packagist/shopxo/shopxo CVE-2022-28056: critical 9.8, EPSS 1.41%
Incorrect Permission Assignment for Critical Resource in ShopXO
Action: Upgrade shopxo/shopxo to 2.2.6 or later.
composer require shopxo/shopxo:2.2.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.6 | - |
Fixed versions
| 2.2.6 |
Sources
- osv: GHSA-jfph-3hpg-2f65
- https://nvd.nist.gov/vuln/detail/CVE-2022-28056
- https://github.com/gongfuxiang/shopxo/issues/66
- https://github.com/gongfuxiang/shopxo
CVE-2022-28056 · published · modified · JSON