Lucene search

CVE-2020-5220

🗓️ 27 Jan 2020 21:11:15Reported by GoogleType

osv🔗 osv.dev👁 5 Views

Sylius ResourceBundle vulnerability in accepting and using any serialization group via HTTP header, leading to potential data exposur

Reporter	Title	Published	Views	Family All 17
OSV	Ability to switch channels via GET parameter enabled in production environments	31 Jan 202018:00	–	osv
OSV	CVE-2020-5218	27 Jan 202021:15	–	osv
OSV	Ability to expose data in Sylius by using an unintended serialisation group	31 Jan 202018:00	–	osv
Friends Of PHP	CVE-2020-5220: Ability to define unintended serialisation groups via HTTP header which might lead to data exposure	1 Jan 197000:00	–	friendsofphp
Friends Of PHP	CVE-2020-5220: Ability to define unintended serialisation groups via HTTP header which might lead to data exposure	1 Jan 197000:00	–	friendsofphp
NVD	CVE-2020-5220	27 Jan 202021:15	–	nvd
NVD	CVE-2020-5218	27 Jan 202021:15	–	nvd
Github Security Blog	Ability to expose data in Sylius by using an unintended serialisation group	31 Jan 202018:00	–	github
Github Security Blog	Ability to switch channels via GET parameter enabled in production environments	31 Jan 202018:00	–	github
Cvelist	CVE-2020-5220 Ability to expose data in Sylius by using an unintended serialisation group	27 Jan 202020:15	–	cvelist

Source	Link
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/sylius/resource-bundle/CVE-2020-5220.yaml
github	www.github.com/Sylius/SyliusResourceBundle/security/advisories/GHSA-8vp7-j5cj-vvm2

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Jan 2020 21:15Current

5.1Medium risk

Vulners AI Score5.1

EPSS0.001