Skip to content
OpenAdvisories

Product · Sylius

SyliusResourceBundle

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.4
    CVE-2020-5220

    Ability to expose data in Sylius by using an unintended serialisation group

    Sylius ResourceBundle accepts and uses any serialisation groups to be passed via a HTTP header. This might lead to data exposure by using an unintended serialisation group - for example it could make Shop API use a more permissive group from Admin API. Anyone…

    Sylius SyliusResourceBundle