CVE-2024-34349
1 advisory.
Packagist/sylius/sylius CVE-2024-34349: medium 4.8
Sylius potentially vulnerable to Cross Site Scripting via "Name" field (Taxons, Products, Options, Variants) in Admin Panel
Action: Upgrade sylius/sylius to 1.9.12 or later.
composer require sylius/sylius:1.9.12composer require sylius/sylius:1.10.16composer require sylius/sylius:1.11.17composer require sylius/sylius:1.12.16composer require sylius/sylius:1.13.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.12 | - |
| 1.10.0-alpha.1 | 1.10.16 | - |
| 1.11.0-alpha.1 | 1.11.17 | - |
| 1.12.0-alpha.1 | 1.12.16 | - |
| 1.13.0-alpha.1 | 1.13.1 | - |
Fixed versions
| 1.9.12 | 1.10.16 | 1.11.17 | 1.12.16 | 1.13.1 |
Sources
- osv: GHSA-v2f9-rv6w-vw8r
- https://github.com/Sylius/Sylius/security/advisories/GHSA-v2f9-rv6w-vw8r
- https://github.com/Sylius/Sylius/commit/ba4b66da5af88cdb1bba6174de8bdf42f4853e12
- https://github.com/Sylius/Sylius
CVE-2024-34349 · published · modified · JSON