Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-22317
HistoryMar 16, 2022 - 12:00 a.m.

Sylius has an unspecified vulnerability (CNVD-2022-22317)

2022-03-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.002 Low

EPSS

Percentile

52.0%

Sylius is an open source e-commerce platform based on the Symfony framework from the Polish company Sylius. sylius has a security vulnerability that stems from the possibility that an attacker-controlled page could load the website in an iframe. This would enable a clickjacking attack where an attacker could exploit the vulnerability to provide a different interface to override the target application’s interface.

0.002 Low

EPSS

Percentile

52.0%