CVE-2020-15128
1 advisory.
Packagist/october/rain CVE-2020-15128: medium 6.1
Reliance on Cookies without validation in OctoberCMS
Action: Upgrade october/rain to 1.0.468 or later.
composer require october/rain:1.0.468Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.319 | 1.0.468 | - |
Fixed versions
| 1.0.468 |
Sources
- osv: GHSA-55mm-5399-7r63
- https://github.com/octobercms/october/security/advisories/GHSA-55mm-5399-7r63
- https://nvd.nist.gov/vuln/detail/CVE-2020-15128
- https://github.com/octobercms/library/pull/508
- https://github.com/octobercms/library/commit/28310d4fb336a1741b39498f4474497644a6875c
CVE-2020-15128 · published · modified · JSON