CVE-2021-32697
1 advisory.
Packagist/neos/form CVE-2021-32697: medium 6.5, EPSS 1.12%
Form validation can be skipped
Action: Upgrade neos/form to 4.3.3 or later.
composer require neos/form:4.3.3composer require neos/form:5.0.9composer require neos/form:5.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.0 | 4.3.3 | - |
| 5.0.0 | 5.0.9 | - |
| 5.1.0 | 5.1.3 | - |
Fixed versions
| 4.3.3 | 5.0.9 | 5.1.3 |
Sources
- osv: GHSA-m5vx-8chx-qvmm
- https://github.com/neos/form/security/advisories/GHSA-m5vx-8chx-qvmm
- https://nvd.nist.gov/vuln/detail/CVE-2021-32697
- https://github.com/neos/form-ghsa-m5vx-8chx-qvmm/pull/1
- https://github.com/neos/form/commit/049d415295be8d4a0478ccba97dba1bb81649567
- https://github.com/neos/form/commit/69de4219b1f58157e2be6b05811463875d75c246
- https://github.com/FriendsOfPHP/security-advisories/blob/master/neos/form/CVE-2021-32697.yaml
- https://github.com/neos/form/releases/tag/5.1.3
CVE-2021-32697 · published · modified · JSON