Skip to content
OpenAdvisories

Package · Packagist

sylius/grid-bundle

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2022-24752

    SQL Injection through sorting parameters in SyliusGridBundle

    SyliusGridBundle is a package of generic data grids for Symfony applications. Prior to versions 1.10.1 and 1.11-rc2, values added at the end of query sorting were passed directly to the database. The maintainers do not know if this could lead to direct SQL in…

    Sylius SyliusGridBundle sylius/grid-bundle Packagist