Packagist/friendsofsymfony/rest-bundle: medium
FOSRestBundle issue with broken validation of JSONP callbacks
Action: Upgrade friendsofsymfony/rest-bundle to 1.2.2 or later.
composer require friendsofsymfony/rest-bundle:1.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.0 | 1.2.2 | - |
Fixed versions
| 1.2.2 |
Sources
- osv: GHSA-p9fg-j6ww-953m
- https://github.com/FriendsOfSymfony/FOSRestBundle/commit/3dd7d40068360c23366fb4884c5d194c769ec2c1
- https://github.com/FriendsOfPHP/security-advisories/blob/master/friendsofsymfony/rest-bundle/2014-01-22-1.yaml
- https://github.com/FriendsOfSymfony/FOSRestBundle
- https://symfony.com/blog/fosrestbundle-security-issue-with-jsonp-handler
published · modified · JSON