CVE-2024-29376
1 advisory.
Packagist/sylius/sylius CVE-2024-29376: medium
Sylius has potential Cross Site Scripting vulnerability via the "Province" field in the Checkout and Address Book
Action: Upgrade sylius/sylius to 1.9.12 or later.
composer require sylius/sylius:1.9.12composer require sylius/sylius:1.10.16composer require sylius/sylius:1.11.17composer require sylius/sylius:1.12.16composer require sylius/sylius:1.13.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.12 | - |
| 1.10.0-alpha.1 | 1.10.16 | - |
| 1.11.0-alpha.1 | 1.11.17 | - |
| 1.12.0-alpha.1 | 1.12.16 | - |
| 1.13.0-alpha.1 | 1.13.1 | - |
Fixed versions
| 1.9.12 | 1.10.16 | 1.11.17 | 1.12.16 | 1.13.1 |
Sources
- osv: GHSA-7prj-9ccr-hr3q
- https://github.com/Sylius/Sylius/security/advisories/GHSA-7prj-9ccr-hr3q
- https://nvd.nist.gov/vuln/detail/CVE-2024-29376
- https://github.com/Sylius/Sylius/commit/fb0ecb275747e364f1d4744ed8605c57f9bd8a80
- https://github.com/Sylius/Sylius
- https://github.com/r2tunes/Reports/blob/main/Sylius.md
CVE-2024-29376 · published · modified · JSON