Skip to content
OpenAdvisories

Vendor

Sylius

35 known vulnerabilities.

Products

Sylius 25 SyliusResourceBundle 3 PayPalPlugin 3 MolliePlugin 2 sylius/sylius 1 SyliusGridBundle 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-24752

    SQL Injection through sorting parameters in SyliusGridBundle

    SyliusGridBundle is a package of generic data grids for Symfony applications. Prior to versions 1.10.1 and 1.11-rc2, values added at the end of query sorting were passed directly to the database. The maintainers do not know if this could lead to direct SQL in…

    Sylius SyliusGridBundle sylius/grid-bundle Packagist
  • Critical 9.6
    CVE-2020-15146

    Remote Code Execution in SyliusResourceBundle

    In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, request parameters injected inside an expression evaluated by `symfony/expression-language` package haven't been sanitized properly. This allows the attacker to access any public service …

    Sylius SyliusResourceBundle sylius/resource-bundle Packagist