p PatchFirst

PatchFirst · Latest vulnerabilities

damienharper/auditor-bundle vulnerabilities

Vulnerabilities published for damienharper/auditor-bundle in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2024-45592

    High · CVSS 8.2EPSS 0.45%Fix available

    auditor-bundle vulnerable to Cross-site Scripting because name of entity does not get escaped

    auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Prior to version 5.2.6, there is an unescaped entity property enabling Javascript injection. This is possible because `%source_label%` in twig macro is not escaped. Therefore script tags can be inserted and are executed. The vulnerability is fixed in versions 6.0.0 and 5.2.6.

    damienharper/auditor-bundlePHP
    • Update to 5.2.6
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →