← Back

Damienharper

damienharper

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Auditor Bundle
auditor-bundle
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-45592
1Damienharper
1Auditor Bundle
Jun 17, 2026
Sep 10, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Prior to version 5.2.6, there is an unescaped entity property enabling Javascript injection. This is po...Show more
auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Prior to version 5.2.6, there is an unescaped entity property enabling Javascript injection. This is possible because `%source_label%` in twig macro is not escaped. Therefore script tags can be inserted and are executed. The vulnerability is fixed in versions 6.0.0 and 5.2.6.Show less