CVE-2021-25994
1 advisory.
Packagist/userfrosting/userfrosting CVE-2021-25994: high 8.8
Injection in UserFrosting
Action: Upgrade userfrosting/userfrosting to 4.6.3 or later.
composer require userfrosting/userfrosting:4.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.3.1 | 4.6.3 | - |
Fixed versions
| 4.6.3 |
Sources
- osv: GHSA-cv25-3gmg-c6m8
- https://nvd.nist.gov/vuln/detail/CVE-2021-25994
- https://github.com/userfrosting/UserFrosting/commit/796dd78757902435d1bd286415feea78098e45ba
- https://github.com/userfrosting/UserFrosting
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25994
CVE-2021-25994 · published · modified · JSON