XSS injection in the Grid component of Sylius

🗓️ 15 Apr 2020 21:07:59Reported by GitHub Advisory DatabaseType

XSS injection in Sylius Grid componen

Reporter	Title	Published	Views	Family All 12
CNVD	Sylius Cross-Site Scripting Vulnerability	2 Jan 202000:00	–	cnvd
CVE	CVE-2019-12186	31 Dec 201914:21	–	cve
Cvelist	CVE-2019-12186	31 Dec 201914:21	–	cvelist
EUVD	EUVD-2020-0393	7 Oct 202500:30	–	euvd
Friends Of PHP	CVE-2019-12186: XSS injection in the Grid component	1 Jan 197000:00	–	friendsofphp
Friends Of PHP	CVE-2019-12186: XSS injection in the Grid component	1 Jan 197000:00	–	friendsofphp
Friends Of PHP	CVE-2019-12186: XSS injection in the Grid component	1 Jan 197000:00	–	friendsofphp
NVD	CVE-2019-12186	31 Dec 201915:15	–	nvd
OSV	CVE-2019-12186	31 Dec 201915:15	–	osv
OSV	GHSA-RC5R-697F-28X6 XSS injection in the Grid component of Sylius	15 Apr 202021:07	–	osv

Vulners

Node

sylius syliusRange1.4.0–1.4.4composer

sylius syliusRange1.3.0–1.3.12composer

sylius syliusRange1.2.0–1.2.17composer

sylius syliusRange1.0.0–1.1.18composer

sylius grid-bundleRange1.5.0–1.5.1composer

sylius grid-bundleRange1.4.0–1.4.5composer

sylius grid-bundleRange1.3.0–1.3.13composer

sylius grid-bundleRange1.2.0–1.2.18composer

sylius grid-bundleRange1.0.0–1.1.19composer

sylius gridRange1.5.0–1.5.1composer

sylius gridRange1.4.0–1.4.5composer

sylius gridRange1.3.0–1.3.13composer

sylius gridRange1.2.0–1.2.18composer

sylius gridRange1.0.0–1.1.19composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-12186
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/sylius/grid/CVE-2019-12186.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/sylius/sylius/CVE-2019-12186.yaml
sylius	www.sylius.com/blog/cve-2019-12186
github	www.github.com/advisories/GHSA-rc5r-697f-28x6

26 Feb 2024 12:35Current

1Low risk

Vulners AI Score1

CVSS 23.5

CVSS 3.14.8

EPSS0.00295