Login Request a demo
SY
Product
Syliusresourcebundle
by Sylius · last CVE Aug 20, 2020
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities3Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Syliusresourcebundle to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-15146
8.8
2%
Aug 20
In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, request parameters injected inside an expression evaluated by `symfony/expression-language` package haven't…
Affected: through 1.3.13; 1.4.0 through 1.4.6; 1.5.0 through 1.5.1; 1.6.0 through 1.6.3
CVE-2020-15143
8.8
2%
Aug 20
In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, rrequest parameters injected inside an expression evaluated by `symfony/expression-language` package…
Affected: through 1.3.13; 1.4.0 through 1.4.6; 1.5.0 through 1.5.1; 1.6.0 through 1.6.3
CVE-2020-5220
5.3
1%
Jan 27
Sylius ResourceBundle accepts and uses any serialisation groups to be passed via a HTTP header
Affected: 1.3.0 through 1.3.12; 1.4.0 through 1.4.5; 1.6.0 through 1.6.2; 1.5.0
Showing 3