Skip to content
OpenAdvisories

Product · Sylius

SyliusResourceBundle

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2020-15146

    Remote Code Execution in SyliusResourceBundle

    In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, request parameters injected inside an expression evaluated by `symfony/expression-language` package haven't been sanitized properly. This allows the attacker to access any public service …

    Sylius SyliusResourceBundle sylius/resource-bundle Packagist