Lucene search
CVE-2024-37156
SuluFormBundle dynamic form XSS vulnerability fixed in 2.5.3
Show more
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-2024-37156 TokenController formName not sanitized in hidden input | 6 Jun 202416:03 | – | vulnrichment |
 | GHSA-RRVC-C7XG-7CF3 TokenController formName not sanitized in hidden input | 6 Jun 202421:36 | – | osv |
| CVE-2024-37156 | 6 Jun 202416:15 | – | osv |
 | CVE-2024-37156 TokenController formName not sanitized in hidden input | 6 Jun 202416:03 | – | cvelist |
 | TokenController formName not sanitized in hidden input | 6 Jun 202421:36 | – | github |
 | CVE-2024-37156 | 6 Jun 202416:15 | – | nvd |
 | Cross Site Scripting (XSS) | 11 Jun 202406:43 | – | veracode |
Node
[
{
"vendor": "sulu",
"product": "SuluFormBundle",
"versions": [
{
"version": ">=2.0.0, < 2.5.3",
"status": "affected"
}
]
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo06 Jun 2024 16:15Current
6Medium risk
Vulners AI Score6
CVSS36.1
EPSS0.00046
SSVC