Skip to content
OpenAdvisories

Product · Sylius

SyliusResourceBundle

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2020-15143

    Remote Code Execution in SyliusResourceBundle

    In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, rrequest parameters injected inside an expression evaluated by `symfony/expression-language` package haven't been sanitized properly. This allows the attacker to access any public service…

    Sylius SyliusResourceBundle sylius/resource-bundle Packagist