Skip to content
OpenAdvisories

Package · Packagist

sylius/resource-bundle

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    GHSA-65v7-wg35-2qpm

    Sylius Resource Bundle Cross-Site Request Forgery vulnerability

    Sylius 1.0.0 to 1.0.16, 1.1.0 to 1.1.8, 1.2.0 to 1.2.1 versions of AdminBundle and ResourceBundle are affected by this security issue. This issue has been fixed in Sylius 1.0.17, 1.1.9 and 1.2.2. Development branch for 1.3 release has also been fixed. ### Des…

    sylius/resource-bundle Packagist
  • Medium 4.4
    CVE-2020-5218

    Ability in Sylius to switch channels via GET parameter enabled in production environments

    Affected versions of Sylius give attackers the ability to switch channels via the _channel_code GET parameter in production environments. This was meant to be enabled only when kernel.debug is set to true. However, if no sylius_channel.debug is set explicitly…

    Sylius Sylius sylius/sylius sylius/resource-bundle Packagist