Known Vulnerabilities for products from Sylius
Listed below are 14 of the newest known vulnerabilities associated with the vendor "Sylius".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-24752 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2022-03-15 | 2022-03-25 |
| CVE-2022-24749 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6.1 - MEDIUM | 2022-03-14 | 2022-03-22 |
| CVE-2022-24743 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.2 - HIGH | 2022-03-14 | 2022-03-22 |
| CVE-2022-24742 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 5.5 - MEDIUM | 2022-03-14 | 2023-06-30 |
| CVE-2022-24733 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6.1 - MEDIUM | 2022-03-14 | 2022-03-22 |
| CVE-2021-41120 json | sylius/paypal-plugin is a paypal plugin for the Sylius development platform. In affected versions the URL to the payment page... | 7.5 - HIGH | 2021-10-05 | 2022-08-12 |
| CVE-2021-32720 json | Sylius is an Open Source eCommerce platform on top of Symfony. In versions of Sylius prior to 1.9.5 and 1.10.0-RC.1, part of ... | 5.3 - MEDIUM | 2021-06-28 | 2021-07-02 |
| CVE-2020-15245 json | In Sylius before versions 1.6.9, 1.7.9 and 1.8.3, the user may register in a shop by email [email protected], verify it, chang... | 4.3 - MEDIUM | 2020-10-19 | 2021-11-18 |
| CVE-2020-15146 json | In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, request parameters injected inside an expression eval... | 8.8 - HIGH | 2020-08-20 | 2021-11-18 |
| CVE-2020-15143 json | In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, rrequest parameters injected inside an expression eva... | 8.8 - HIGH | 2020-08-20 | 2021-11-18 |
| CVE-2020-5220 json | Sylius ResourceBundle accepts and uses any serialisation groups to be passed via a HTTP header. This might lead to data expos... | 5.3 - MEDIUM | 2020-01-27 | 2020-02-04 |
| CVE-2020-5218 json | Affected versions of Sylius give attackers the ability to switch channels via the _channel_code GET parameter in production e... | 4.3 - MEDIUM | 2020-01-27 | 2020-02-07 |
| CVE-2019-16768 json | In affected versions of Sylius, exception messages from internal exceptions (like database exception) are wrapped by \Symfony... | 4.3 - MEDIUM | 2019-12-05 | 2019-12-17 |
| CVE-2019-12186 json | An issue was discovered in Sylius products. Missing input sanitization in sylius/sylius 1.0.x through 1.0.18, 1.1.x through 1... | 4.8 - MEDIUM | 2019-12-31 | 2020-01-08 |
Known software with vulnerabilities from Sylius
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Sylius | Grid | 1.0.0 |
| Application | Sylius | Sylius | 0.1.0 |
| Application | Sylius | Syliusresourcebundle | 0.1.0 |