CVE-2021-27938
1 advisory.
Packagist/symbiote/silverstripe-queuedjobs CVE-2021-27938: medium, EPSS 0.75%
XSS in CreateQueuedJobTask
Action: Upgrade symbiote/silverstripe-queuedjobs to 3.0.2 or later.
composer require symbiote/silverstripe-queuedjobs:3.0.2composer require symbiote/silverstripe-queuedjobs:3.1.4composer require symbiote/silverstripe-queuedjobs:4.0.7composer require symbiote/silverstripe-queuedjobs:4.1.2composer require symbiote/silverstripe-queuedjobs:4.2.4composer require symbiote/silverstripe-queuedjobs:4.3.3composer require symbiote/silverstripe-queuedjobs:4.4.3composer require symbiote/silverstripe-queuedjobs:4.5.1composer require symbiote/silverstripe-queuedjobs:4.6.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.0.2 | - |
| 3.1.0 | 3.1.4 | - |
| 4.0.0 | 4.0.7 | - |
| 4.1.0 | 4.1.2 | - |
| 4.2.0 | 4.2.4 | - |
| 4.3.0 | 4.3.3 | - |
| 4.4.0 | 4.4.3 | - |
| 4.5.0 | 4.5.1 | - |
| 4.6.0 | 4.6.4 | - |
Fixed versions
| 3.0.2 | 3.1.4 | 4.0.7 | 4.1.2 | 4.2.4 | 4.3.3 | 4.4.3 | 4.5.1 | 4.6.4 |
Sources
- osv: GHSA-xgpf-p52j-pf7m
- https://nvd.nist.gov/vuln/detail/CVE-2021-27938
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symbiote/silverstripe-queuedjobs/CVE-2021-27938.yaml
- https://github.com/symbiote/silverstripe-queuedjobs/releases
- https://www.silverstripe.org/download/security-releases/cve-2021-27938
CVE-2021-27938 · published · modified · JSON