CVE-2019-20455
1 advisory.
Packagist/globalpayments/php-sdk CVE-2019-20455: medium 5.9, EPSS 0.98%
Improper Certificate Validation in Heartland & Global Payments PHP SDK
Action: Upgrade globalpayments/php-sdk to 2.0.0 or later.
composer require globalpayments/php-sdk:2.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.0 | - |
Fixed versions
| 2.0.0 |
Sources
- osv: GHSA-pm77-c4q7-3fwj
- https://nvd.nist.gov/vuln/detail/CVE-2019-20455
- https://github.com/globalpayments/php-sdk/pull/8
- https://github.com/globalpayments/php-sdk/pull/8/commits/c86e18f28c5eba0d6ede7d557756d978ea83d3c9
- https://github.com/globalpayments/php-sdk
- https://github.com/globalpayments/php-sdk/compare/1.3.3...2.0.0
- https://github.com/globalpayments/php-sdk/releases/tag/2.0.0
- https://winterdragon.ca/global-payments-vulnerability
CVE-2019-20455 · published · modified · JSON