CVE-2021-43852
1 advisory.
Packagist/oro/platform CVE-2021-43852: medium 5.3, EPSS 1.09%
Client-Side JavaScript Prototype Pollution in oro/platform
Action: Upgrade oro/platform to 4.1.14 or later.
composer require oro/platform:4.1.14composer require oro/platform:4.2.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.1.0 | 4.1.14 | - |
| 4.2.0 | 4.2.8 | - |
Fixed versions
| 4.1.14 | 4.2.8 |
Sources
- osv: GHSA-jx5q-g37m-h5hj
- https://github.com/oroinc/platform/security/advisories/GHSA-jx5q-g37m-h5hj
- https://nvd.nist.gov/vuln/detail/CVE-2021-43852
- https://github.com/oroinc/platform/commit/62c26936b3adee9c20255dcd9f8ee5c299b464a9
- https://github.com/oroinc/platform
CVE-2021-43852 · published · modified · JSON