Security Advisory

CVE-2022-24752

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-03-15 14:40:13

Last updated 2025-04-23 18:53:49

Assigner GitHub_M

State PUBLISHED

Description

SyliusGridBundle is a package of generic data grids for Symfony applications. Prior to versions 1.10.1 and 1.11-rc2, values added at the end of query sorting were passed directly to the database. The maintainers do not know if this could lead to direct SQL injections but took steps to remediate the vulnerability. The issue is fixed in versions 1.10.1 and 1.11-rc2. As a workaround, overwrite the`SyliusComponentGridSortingSorter.php` class and register it in the container. More information about this workaround is available in the GitHub Security Advisory.

← Browse all CVEs View on cve.org ↗