CVE-2022-46157
1 advisory.
Packagist/akeneo/pim-community-dev CVE-2022-46157: high 8.8, EPSS 1.50%
Akeneo PIM Community Edition vulnerable to remote php code execution
Action: Upgrade akeneo/pim-community-dev to 5.0.119 or later.
composer require akeneo/pim-community-dev:6.0.53composer require akeneo/pim-community-dev:5.0.119Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 6.0.53 | - |
| 0 | 5.0.119 | - |
Fixed versions
| 6.0.53 | 5.0.119 |
Sources
- osv: GHSA-w9wc-4xcq-8gr6
- https://github.com/akeneo/pim-community-dev/security/advisories/GHSA-w9wc-4xcq-8gr6
- https://nvd.nist.gov/vuln/detail/CVE-2022-46157
- https://github.com/akeneo/pim-community-dev/commit/891a2f70a9a200f199de06fe64d376d03787a81a
- https://github.com/akeneo/pim-community-dev
- https://github.com/akeneo/pim-community-dev/blob/b4d79bb073c8b68ea26ab227c97cc78d86c4cba1/docker/httpd.conf#L39
CVE-2022-46157 · published · modified · JSON