CVE-2024-25637
1 advisory.
Packagist/october/system CVE-2024-25637: low 3.1
October System module has a Reflected XSS via X-October-Request-Handler Header
Action: Upgrade october/system to 3.5.15 or later.
composer require october/system:3.5.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.2 | 3.5.15 | - |
Fixed versions
| 3.5.15 |
Sources
- osv: GHSA-rjw8-v7rr-r563
- https://github.com/octobercms/october/security/advisories/GHSA-rjw8-v7rr-r563
- https://nvd.nist.gov/vuln/detail/CVE-2024-25637
- https://github.com/octobercms/october
CVE-2024-25637 · published · modified · JSON