EPSS
Percentile
22.7%
sylius/sylius is vulnerable to information disclosure. The vulnerability exists as the internal exception message gets exposed in the login action through the value of last_error.message in Security/_login.html.twig.
last_error.message
Security/_login.html.twig
github.com/advisories/GHSA-3r8j-pmch-5j2h
github.com/reConNico/Sylius/pull/215
github.com/Sylius/Sylius/commit/19b2fe4a6cdb2186489221ea8b5e5628c8223286
github.com/Sylius/Sylius/commit/be245302dfc594d8690fe50dd47631d186aa945f
github.com/Sylius/Sylius/security/advisories/GHSA-3r8j-pmch-5j2h