Sylius kayıtları
sylius üreticisine ait 25 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %96
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor4
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2
- CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-1021 Improper Restriction of Rendered UI Layers or Frames1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
25 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-24752İstismar yok | SQL Injection through sorting parameters in SyliusGridBundlesylius · syliusgridbundle · CWE-89 | Kritik9,8 | — | %1,4 | 15 Mar 2022 |
36İzleyin | CVE-2020-15146İstismar yok | Remote Code Execution in SyliusResourceBundlesylius · syliusresourcebundle · CWE-74 | Yüksek8,8 | — | %2,1 | 19 Ağu 2020 |
36İzleyin | CVE-2020-15143İstismar yok | Remote Code Execution in SyliusResourceBundlesylius · syliusresourcebundle · CWE-74 | Yüksek8,8 | — | %1,9 | 19 Ağu 2020 |
32İzleyin | CVE-2022-24743İstismar yok | Insufficient Session Expiration in Syliussylius · sylius · CWE-613 | Yüksek8,2 | — | %1,3 | 14 Mar 2022 |
30İzleyin | CVE-2021-41120İstismar yok | Unauthorized access to Credit card form in sylius/paypal-pluginsylius · paypal · CWE-200 | Yüksek7,5 | — | %1,5 | 5 Eki 2021 |
30İzleyin | CVE-2024-57610Kavram kanıtı | A rate limiting issue in Sylius v2.0.2 allows a remote attacker to perform unrestricted brute-force attacks on user accounts, significantly sylius · sylius · CWE-307 | Yüksek7,5 | — | %1,2 | 6 Şub 2025 |
28İzleyin | CVE-2026-31820İstismar yok | Sylius affected by IDOR in Cart and Checkout LiveComponentssylius · sylius · CWE-639 | Yüksek7,1 | — | %0,4 | 10 Mar 2026 |
27İzleyin | CVE-2026-31821İstismar yok | Sylius is Missing Authorization in API v2 Add Item Endpointsylius · sylius · CWE-862 | Orta6,9 | — | %0,3 | 10 Mar 2026 |
27İzleyin | CVE-2026-31819İstismar yok | Sylius has an Open Redirect via Referer Headersylius · sylius · CWE-601 | Orta6,9 | — | %0,3 | 10 Mar 2026 |
25İzleyin | CVE-2024-29376İstismar yok | Sylius 1.12.13 is vulnerable to Cross Site Scripting (XSS) via the "Province" field in Address Book.sylius · sylius · CWE-79 | Orta6,4 | — | %0,4 | 22 Nis 2024 |
24İzleyin | CVE-2022-24749İstismar yok | Basic Cross-site Scripting and Unrestricted Upload of File with Dangerous Type in Syliussylius · sylius · CWE-80 | Orta6,1 | — | %1,1 | 14 Mar 2022 |
24İzleyin | CVE-2022-24733İstismar yok | Improper Restriction of Rendered UI Layers or Frames in Syliussylius · sylius · CWE-1021 | Orta6,1 | — | %0,9 | 14 Mar 2022 |
23İzleyin | CVE-2026-31824İstismar yok | Sylius has a Promotion Usage Limit Bypass via Race Conditionsylius · sylius · CWE-362 | Orta5,9 | — | %0,3 | 10 Mar 2026 |
22İzleyin | CVE-2022-24742İstismar yok | Exposure of Sensitive Information Due to Incompatible Policies in Syliussylius · sylius · CWE-200 | Orta5,5 | — | %0,8 | 14 Mar 2022 |
21İzleyin | CVE-2021-32720İstismar yok | List of order ids, number, items total and token value exposed for unauthorized uses via new APIsylius · sylius · CWE-200 | Orta5,3 | — | %0,9 | 28 Haz 2021 |
21İzleyin | CVE-2020-5220İstismar yok | Ability to expose data in Sylius by using an unintended serialisation groupsylius · syliusresourcebundle · CWE-444 | Orta5,3 | — | %0,7 | 27 Oca 2020 |
21İzleyin | CVE-2024-40633İstismar yok | Customer data leak via adjustments API endpoint in Syliussylius · sylius · CWE-200 | Orta5,3 | — | %0,4 | 17 Tem 2024 |
21İzleyin | CVE-2026-31825İstismar yok | Sylius has a DQL Injection via API Order Filterssylius · sylius · CWE-89 | Orta5,3 | — | %0,3 | 10 Mar 2026 |
21İzleyin | CVE-2026-31822İstismar yok | Sylius has a XSS vulnerability in checkout login formsylius · sylius · CWE-79 | Orta5,3 | — | %0,3 | 10 Mar 2026 |
21İzleyin | CVE-2021-3841İstismar yok | Stored Cross-site Scripting (XSS) in sylius/syliussylius · sylius · CWE-79 | Orta5,4 | — | %0,2 | 15 Kas 2024 |
19İzleyin | CVE-2019-12186İstismar yok | An issue was discovered in Sylius products.sylius · grid · CWE-79 | Orta4,8 | — | %0,6 | 31 Ara 2019 |
19İzleyin | CVE-2026-31823İstismar yok | Sylius has Authenticated Stored XSSsylius · sylius · CWE-79 | Orta4,8 | — | %0,3 | 10 Mar 2026 |
17İzleyin | CVE-2019-16768İstismar yok | Internal exception message exposure for login action in Syliussylius · sylius · CWE-209 | Orta4,3 | — | %0,7 | 5 Ara 2019 |
17İzleyin | CVE-2020-15245İstismar yok | Email verification bypass in Syliussylius · sylius · CWE-79 | Orta4,3 | — | %0,6 | 19 Eki 2020 |
17İzleyin | CVE-2020-5218İstismar yok | Ability in Sylius to switch channels via GET parameter enabled in production environmentssylius · sylius · CWE-444 | Orta4,3 | — | %0,6 | 27 Oca 2020 |
- CVE-2022-2475239İzleyin
SQL Injection through sorting parameters in SyliusGridBundle
KritikCVSS 9,8İstismar yokEPSS %1sylius · syliusgridbundle15 Mar 2022
- CVE-2020-1514636İzleyin
Remote Code Execution in SyliusResourceBundle
YüksekCVSS 8,8İstismar yokEPSS %2sylius · syliusresourcebundle19 Ağu 2020
- CVE-2020-1514336İzleyin
Remote Code Execution in SyliusResourceBundle
YüksekCVSS 8,8İstismar yokEPSS %2sylius · syliusresourcebundle19 Ağu 2020
- CVE-2022-2474332İzleyin
Insufficient Session Expiration in Sylius
YüksekCVSS 8,2İstismar yokEPSS %1sylius · sylius14 Mar 2022
- CVE-2021-4112030İzleyin
Unauthorized access to Credit card form in sylius/paypal-plugin
YüksekCVSS 7,5İstismar yokEPSS %2sylius · paypal5 Eki 2021
- CVE-2024-5761030İzleyin
A rate limiting issue in Sylius v2.0.2 allows a remote attacker to perform unrestricted brute-force attacks on user accounts, significantly
YüksekCVSS 7,5Kavram kanıtıEPSS %1sylius · sylius6 Şub 2025
- CVE-2026-3182028İzleyin
Sylius affected by IDOR in Cart and Checkout LiveComponents
YüksekCVSS 7,1İstismar yokEPSS %0sylius · sylius10 Mar 2026
- CVE-2026-3182127İzleyin
Sylius is Missing Authorization in API v2 Add Item Endpoint
OrtaCVSS 6,9İstismar yokEPSS %0sylius · sylius10 Mar 2026
- CVE-2026-3181927İzleyin
Sylius has an Open Redirect via Referer Header
OrtaCVSS 6,9İstismar yokEPSS %0sylius · sylius10 Mar 2026
- CVE-2024-2937625İzleyin
Sylius 1.12.13 is vulnerable to Cross Site Scripting (XSS) via the "Province" field in Address Book.
OrtaCVSS 6,4İstismar yokEPSS %0sylius · sylius22 Nis 2024
- CVE-2022-2474924İzleyin
Basic Cross-site Scripting and Unrestricted Upload of File with Dangerous Type in Sylius
OrtaCVSS 6,1İstismar yokEPSS %1sylius · sylius14 Mar 2022
- CVE-2022-2473324İzleyin
Improper Restriction of Rendered UI Layers or Frames in Sylius
OrtaCVSS 6,1İstismar yokEPSS %1sylius · sylius14 Mar 2022
- CVE-2026-3182423İzleyin
Sylius has a Promotion Usage Limit Bypass via Race Condition
OrtaCVSS 5,9İstismar yokEPSS %0sylius · sylius10 Mar 2026
- CVE-2022-2474222İzleyin
Exposure of Sensitive Information Due to Incompatible Policies in Sylius
OrtaCVSS 5,5İstismar yokEPSS %1sylius · sylius14 Mar 2022
- CVE-2021-3272021İzleyin
List of order ids, number, items total and token value exposed for unauthorized uses via new API
OrtaCVSS 5,3İstismar yokEPSS %1sylius · sylius28 Haz 2021
- CVE-2020-522021İzleyin
Ability to expose data in Sylius by using an unintended serialisation group
OrtaCVSS 5,3İstismar yokEPSS %1sylius · syliusresourcebundle27 Oca 2020
- CVE-2024-4063321İzleyin
Customer data leak via adjustments API endpoint in Sylius
OrtaCVSS 5,3İstismar yokEPSS %0sylius · sylius17 Tem 2024
- CVE-2026-3182521İzleyin
Sylius has a DQL Injection via API Order Filters
OrtaCVSS 5,3İstismar yokEPSS %0sylius · sylius10 Mar 2026
- CVE-2026-3182221İzleyin
Sylius has a XSS vulnerability in checkout login form
OrtaCVSS 5,3İstismar yokEPSS %0sylius · sylius10 Mar 2026
- CVE-2021-384121İzleyin
Stored Cross-site Scripting (XSS) in sylius/sylius
OrtaCVSS 5,4İstismar yokEPSS %0sylius · sylius15 Kas 2024
- CVE-2019-1218619İzleyin
An issue was discovered in Sylius products.
OrtaCVSS 4,8İstismar yokEPSS %1sylius · grid31 Ara 2019
- CVE-2026-3182319İzleyin
Sylius has Authenticated Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0sylius · sylius10 Mar 2026
- CVE-2019-1676817İzleyin
Internal exception message exposure for login action in Sylius
OrtaCVSS 4,3İstismar yokEPSS %1sylius · sylius5 Ara 2019
- CVE-2020-1524517İzleyin
Email verification bypass in Sylius
OrtaCVSS 4,3İstismar yokEPSS %1sylius · sylius19 Eki 2020
- CVE-2020-521817İzleyin
Ability in Sylius to switch channels via GET parameter enabled in production environments
OrtaCVSS 4,3İstismar yokEPSS %1sylius · sylius27 Oca 2020