Skip to content
OpenAdvisories

Package · Packagist

sensiolabs/connect

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    GHSA-6wqp-7g94-f69j

    sensiolabs/connect has a Cross-Site Request Forgery Vulnerability

    Versions of sensiolabs/connect prior to 4.2.3 are affected by a Cross-Site Request Forgery (CSRF) vulnerability due to the absence of the state parameter in OAuth requests. The lack of proper state parameter handling exposes applications to CSRF attacks durin…

    sensiolabs/connect Packagist