VYPR

Auditor Bundle

by Damienharper

Source repositories

CVEs (1)

  • CVE-2024-45592HigSep 10, 2024
    risk 0.46cvss 8.2epss 0.00

    auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Prior to version 5.2.6, there is an unescaped entity property enabling Javascript injection. This is possible because `%source_label%` in twig macro is not…