Skip to content
OpenAdvisories

Package · Packagist

damienharper/auditor-bundle

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.2
    CVE-2024-45592

    auditor-bundle vulnerable to Cross-site Scripting because name of entity does not get escaped

    auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Prior to version 5.2.6, there is an unescaped entity property enabling Javascript injection. This is possible because `%source_label%` in twig…

    DamienHarper auditor-bundle damienharper/auditor-bundle Packagist