CVE-2024-37156
1 advisory.
Packagist/sulu/form-bundle CVE-2024-37156: medium 6.1
TokenController formName not sanitized in hidden input
Action: Upgrade sulu/form-bundle to 2.5.3 or later.
composer require sulu/form-bundle:2.5.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.5.3 | - |
Fixed versions
| 2.5.3 |
Sources
- osv: GHSA-rrvc-c7xg-7cf3
- https://github.com/sulu/SuluFormBundle/security/advisories/GHSA-rrvc-c7xg-7cf3
- https://nvd.nist.gov/vuln/detail/CVE-2024-37156
- https://github.com/sulu/SuluFormBundle/commit/3f341b71a7309cbc8fd2c5bff894c654d1679b17
- https://github.com/sulu/SuluFormBundle
CVE-2024-37156 · published · modified · JSON