Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sylius syliusresourcebundle vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2020-5220
Sylius ResourceBundle accepts and uses any serialisation groups to be passed via a HTTP header. This might lead to data exposure by using an unintended serialisation group - for example it could make Shop API use a more permissive group from Admin API. Anyone exposing an API with...
Sylius Syliusresourcebundle
Sylius Syliusresourcebundle 1.5.0
6.5
CVSSv2
CVE-2020-15143
In SyliusResourceBundle prior to 1.3.14, 1.4.7, 1.5.2 and 1.6.4, rrequest parameters injected inside an expression evaluated by `symfony/expression-language` package haven't been sanitized properly. This allows the malicious user to access any public service by manipulating ...
Sylius Syliusresourcebundle
6.5
CVSSv2
CVE-2020-15146
In SyliusResourceBundle prior to 1.3.14, 1.4.7, 1.5.2 and 1.6.4, request parameters injected inside an expression evaluated by `symfony/expression-language` package haven't been sanitized properly. This allows the malicious user to access any public service by manipulating t...
Sylius Syliusresourcebundle
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49333
CVE-2024-33901
CVE-2024-36001
CVE-2024-2835
firewall
XPath injection
authentication bypass
CVE-2024-22120
CVE-2024-32002
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started