Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:22375
HistoryJan 28, 2020 - 4:34 a.m.

Information Disclosure

2020-01-2804:34:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

EPSS

0.001

Percentile

30.9%

JSON

sylius/resource-bundle is vulnerable to information disclosure. The vulnerability exists as ResourceBundle did not properly restrict the values of serialization_groups to be passed through the HTTP header.

Related

friendsofphp 2
nvd 1
github 1
prion 1
cve 1
cvelist 1
osv 4
friendsofphp
friendsofphp
CVE-2020-5220: Ability to define unintended serialisation groups via HTTP header which might lead to data exposure
1970-01-01 00:00:00
CVE-2020-5220: Ability to define unintended serialisation groups via HTTP header which might lead to data exposure
1970-01-01 00:00:00
nvd
nvd
CVE-2020-5220
2020-01-27 21:15:11
github
github
Ability to expose data in Sylius by using an unintended serialisation group
2020-01-31 18:00:43
prion
prion
Design/Logic Flaw
2020-01-27 21:15:00
cve
cve
CVE-2020-5220
2020-01-27 21:15:11
cvelist
cvelist
CVE-2020-5220 Ability to expose data in Sylius by using an unintended serialisation group
2020-01-27 20:15:17
osv
osv
Ability to expose data in Sylius by using an unintended serialisation group
2020-01-31 18:00:43
CVE-2020-5218
2020-01-27 21:15:11
CVE-2020-5220
2020-01-27 21:15:11

EPSS

0.001

Percentile

30.9%

JSON
Related for VERACODE:22375
friendsofphp2nvd1github1prion1cve1cvelist1osv4