Packagist/akeneo/pim-community-dev CVE-2017-1000009: critical 9.8, EPSS 3.93%
Akeneo PIM vulnerable to shell injection in the mass edition
Action: Upgrade akeneo/pim-community-dev to 1.4.28 or later.
composer require akeneo/pim-community-dev:1.4.28composer require akeneo/pim-community-dev:1.5.15composer require akeneo/pim-community-dev:1.6.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4 | 1.4.28 | - |
| 1.5 | 1.5.15 | - |
| 1.6 | 1.6.6 | - |
Fixed versions
| 1.4.28 | 1.5.15 | 1.6.6 |
Sources
- osv: GHSA-q8cr-xphm-7gfv
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000009
- https://github.com/akeneo/pim-community-dev
- https://github.com/akeneo/pim-community-dev/blob/1.5/CHANGELOG-1.5.md#bug-fixes-2
- https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.4.md#bug-fixes
- https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.6.md#bug-fixes-2
CVE-2017-1000009 · published · modified · JSON