Packagist/redaxo/source: low
REDAXO has reflected XSS in backend Metainfo API via type parameter (CSRF token required)
Action: Upgrade redaxo/source to 5.21.0 or later.
composer require redaxo/source:5.21.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.21.0 | - |
Fixed versions
| 5.21.0 |
Sources
- osv: GHSA-m662-8jrj-cw6v
- https://github.com/redaxo/core/security/advisories/GHSA-m662-8jrj-cw6v
- https://github.com/redaxo/core
- https://github.com/redaxo/core/releases/tag/5.21.0
published · modified · JSON