p PatchFirst

PatchFirst · Latest vulnerabilities

sensiolabs/connect vulnerabilities

Vulnerabilities published for sensiolabs/connect in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. GHSA-6wqp-7g94-f69j

    Medium · CVSS 6.1Fix available

    sensiolabs/connect has a Cross-Site Request Forgery Vulnerability

    Versions of sensiolabs/connect prior to 4.2.3 are affected by a Cross-Site Request Forgery (CSRF) vulnerability due to the absence of the state parameter in OAuth requests. The lack of proper state parameter handling exposes applications to CSRF attacks during the OAuth authentication flow.

    sensiolabs/connectPHP
    • Update to 4.2.3
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →