CVE-2024-27915
1 advisory.
Packagist/sulu/sulu CVE-2024-27915: medium 6.8
Sulu grants access to pages regardless of role permissions
Action: Upgrade sulu/sulu to 2.4.17 or later.
composer require sulu/sulu:2.4.17composer require sulu/sulu:2.5.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.0 | 2.4.17 | - |
| 2.5.0-alpha1 | 2.5.13 | - |
Fixed versions
| 2.4.17 | 2.5.13 |
Sources
- osv: GHSA-jr83-m233-gg6p
- https://github.com/sulu/sulu/security/advisories/GHSA-jr83-m233-gg6p
- https://nvd.nist.gov/vuln/detail/CVE-2024-27915
- https://github.com/sulu/sulu/commit/ec9c3f99e15336dc4f6877f512300f231c17c6da
- https://github.com/sulu/sulu
CVE-2024-27915 · published · modified · JSON