Vulnerabilities
Projects
Vulnerability Disclosure
About Us
Contact Us
Mend.io Vulnerability Database
What is a WS vulnerability ID?
What is an MSC vulnerability ID?
We found results for “”
WS-2018-0144
Good to know:
Date: July 8, 2018
"CSRF vulnerability in the admin panel.Sylius 1.0.0 to 1.0.16, 1.1.0 to 1.1.8, 1.2.0 to 1.2.1 versions of AdminBundle and ResourceBundle are affected by this security issue."
Language: PHP
Severity Score
Severity Score
Weakness Type (CWE)
Cross-Site Request Forgery (CSRF)
CWE-352Top Fix
Upgrade Version
Upgrade to version sylius/sylius - dev-dependabot/npm_and_yarn/path-parse-1.0.7;sylius/sylius - v1.2.11;sylius/sylius - 1.2.x-dev;sylius/sylius - dev-dependabot/composer/phpstan/phpstan-doctrine-1.3.4;sylius/sylius - 1.0.x-dev;sylius/sylius - dev-dependabot/composer/rector/rector-tw-1.2.3;sylius/sylius - v1.1.18;sylius/sylius - dev-dependabot/composer/rector/rector-tw-1.2.5;sylius/sylius - dev-dependabot/composer/rector/rector-tw-1.2.6;sylius/sylius - 1.1.x-dev;sylius/sylius - dev-dependabot/composer/rector/rector-tw-1.2.2;sylius/sylius - dev-dependabot/composer/rector/rector-tw-1.0.5;sylius/sylius - dev-dependabot/composer/rector/rector-tw-1.2.1;sylius/sylius - v1.0.17;sylius/sylius - 1.3.x-dev;sylius/sylius - dev-dependabot/composer/rector/rector-tw-1.1.1;sylius/resource-bundle - dev-dependabot/composer/rector/rector-tw-1.2.4;sylius/resource-bundle - dev-dependabot/composer/rector/rector-tw-1.2.6;sylius/resource-bundle - dev-dependabot/composer/rector/rector-tw-1.2.5;sylius/resource-bundle - 1.2.x-dev;sylius/resource-bundle - v1.3.4;sylius/resource-bundle - dev-dependabot/composer/rector/rector-tw-1.0.1;sylius/resource-bundle - 1.3.x-dev;sylius/resource-bundle - v1.2.11;sylius/resource-bundle - 1.0.x-dev;sylius/resource-bundle - v1.0.17;odiseoteam/sylius - v1.1.3;odiseoteam/sylius - 1.3.x-dev;odiseoteam/sylius - v1.3.4;odiseoteam/sylius - v1.1.18;odiseoteam/sylius - v1.2.5;odiseoteam/sylius - v1.2.11;odiseoteam/sylius - v1.0.17
CVSS v3.1
| Base Score: |
|
|---|---|
| Attack Vector (AV): | NETWORK |
| Attack Complexity (AC): | LOW |
| Privileges Required (PR): | NONE |
| User Interaction (UI): | REQUIRED |
| Scope (S): | UNCHANGED |
| Confidentiality (C): | HIGH |
| Integrity (I): | HIGH |
| Availability (A): | HIGH |