Auditor Bundle
Approved changes feed: RSS · Atom
cpe:2.3:a:damienharper:auditor-bundle:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Damienharper (e9ca8a4f-4ebb-59c9-9ae1-bdbeaf091176) |
|---|---|
| Product | Auditor Bundle (eec2b19d-2550-59ba-8f7c-1055a95482e4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:composer/damienharper/auditor-bundle |
purl2cpe | 2026-06-01 10:12:18.588933 |
pkg:github/damienharper/auditor-bundle |
purl2cpe | 2026-06-01 10:12:18.588935 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-45592 |
vulnerable | 2026-06-08 06:48:08.700756 |
auditor-bundle vulnerable to Cross-site Scripting because name of entity does not get escaped
HIGH (8.2)
auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Prior to version 5.2.6, there is an unescaped entity property enabling Javascript injection. This is possible because `%source_label%` in twig macro is not escaped. Therefore script tags can be inserted and are executed. The vulnerability is fixed in versions 6.0.0 and 5.2.6.
Published: 2024-09-10T16:00:14.887Z
Updated: 2024-09-20T18:10:49.795Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.