CVE-2020-15146
Last modified
CVE-2020-15146 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, request parameters injected inside an expression evaluated by `symfony/expression-language` package haven't been sanitized properly. This allows the attacker to access any public service by manipulating that request parameter, allowing for Remote Code Execution. EPSS estimates a 2.15% chance of exploitation in the next 30 days.
Description
In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, request parameters injected inside an expression evaluated by `symfony/expression-language` package haven't been sanitized properly. This allows the attacker to access any public service by manipulating that request parameter, allowing for Remote Code Execution. This issue has been patched for versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4. Versions prior to 1.3 were not patched.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sylius | Syliusresourcebundle | <= 1.3.13 |
| Sylius | Syliusresourcebundle | >= 1.4.0, <= 1.4.6 |
| Sylius | Syliusresourcebundle | >= 1.5.0, <= 1.5.1 |
| Sylius | Syliusresourcebundle | >= 1.6.0, <= 1.6.3 |
References
- https://github.com/Sylius/SyliusResourceBundle/security/advisories/GHSA-h6m7-j4h3-9rf5Exploit, Mitigation, Third Party Advisory
- https://github.com/Sylius/SyliusResourceBundle/security/advisories/GHSA-h6m7-j4h3-9rf5Exploit, Mitigation, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-15146?
How severe is CVE-2020-15146?
How do I fix CVE-2020-15146?
Are you affected by CVE-2020-15146?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST