CVE-2022-33154
1 advisory.
Packagist/brotkrueml/schema CVE-2022-33154: medium 5.4, EPSS 0.52%
brotkrueml/schema fails to properly encode user input for output in HTML context, leading to XSS
Action: Upgrade brotkrueml/schema to 1.13.1 or later.
composer require brotkrueml/schema:2.5.1composer require brotkrueml/schema:1.13.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.5.1 | - |
| 0 | 1.13.1 | - |
Fixed versions
| 2.5.1 | 1.13.1 |
Sources
- osv: GHSA-374w-gwqr-fmxg
- https://nvd.nist.gov/vuln/detail/CVE-2022-33154
- https://github.com/FriendsOfPHP/security-advisories/blob/master/brotkrueml/schema/CVE-2022-33154.yaml
- https://github.com/brotkrueml/schema
- https://typo3.org/security/advisory/typo3-ext-sa-2022-012
CVE-2022-33154 · published · modified · JSON