Cyber Security Daily Radar

#composer

共收录 517 条相关情报。

← 返回所有主题
安全公告2026-05-29 发布INFO

Admidio module-administrator can delete or reorder categories owned by other modules via dead authorization check in `modules/categories.php`

CVE-2026-47227

## Summary `modules/categories.php` checks that the supplied `type` parameter (`ANN`, `EVT`, `ROL`, `USF`, …) correspon

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-639#cwe-863#severity:medium
安全公告2026-05-29 发布INFO

Admidio: Authorization bypass in file_delete enables cross-folder file removal by authenticated users without delete privileges

CVE-2026-47226

### Summary An authenticated Admidio member with upload rights on **any one folder** can permanently delete files from

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-639#cwe-862#severity:medium
安全公告2026-05-29 发布INFO

Symfony: Twilio SMS Notifier allows unauthenticated webhook injection due to missing X-Twilio-Signature verification

CVE-2026-47212

### Description The Twilio SMS notifier bridge ships a webhook request parser used to authenticate and decode the statu

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-306#cwe-347#severity:medium
安全公告2026-05-29 发布INFO

Koel Vulnerable to SSRF via Podcast Episode Enclosure URLs

CVE-2026-47260

## Summary Koel validates the podcast feed URL via the `SafeUrl` rule (DNS resolution + public IP check), but the indiv

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-918#severity:high
安全公告2026-05-29 发布INFO

ezsystems/ezpublish-legacy has a SQL injection in dfscleanup

CVE-2026-38739

NB: All tags and branches in this repository are past their end of life, so the vulnerability will not be fixed. The adv

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-89#severity:high
安全公告2026-05-27 发布INFO

Pimcore has a CustomReports Share Bypass

CVE-2026-45704

### Summary `CustomReports` uses inconsistent authorization between the report listing endpoint and the report detail e

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-863#severity:high
安全公告2026-05-27 发布INFO

Pimcore has a WordExport Authorization Bypass for Unauthorized Document Export

CVE-2026-45703

### Summary The `WordExport` export flow only checks whether the current backend user has the feature permission `word_

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-863#severity:medium
安全公告2026-05-27 发布INFO

Symfony's YAML Parser has a ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex

CVE-2026-45305

### Description `Symfony\Component\Yaml\Parser::cleanup()` strips the optional `%YAML` directive header, leading commen

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-1333#severity:low
安全公告2026-05-27 发布INFO

Symfony's YAML Parser Vulnerable to Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs")

CVE-2026-45304

### Description `Symfony\Component\Yaml\Parser` resolves YAML aliases (`*anchor`) during parsing. Aliases that referenc

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-776#severity:low
安全公告2026-05-27 发布INFO

Symfony hardened the parser when handling untrusted input

CVE-2026-45133

### Description `Symfony\Component\Yaml\Parser` is the entry point for parsing YAML strings into PHP values via `Yaml::

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-674#cwe-776#cwe-1333#severity:low
安全公告2026-05-27 发布INFO

Automad has Broken Access Control: Unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint

CVE-2026-45332

### Summary A Broken Access Control vulnerability allows an unauthenticated attacker to retrieve the bcrypt password h

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-200#cwe-306#severity:high
安全公告2026-05-27 发布INFO

Symfony has Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener

CVE-2026-45077

### Description `Symfony\Bridge\Monolog\Command\ServerLogCommand` (the `server:log` console command) is a development-t

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-502#cwe-668#severity:high
安全公告2026-05-27 发布INFO

Synfony's HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]

CVE-2026-45075

### Description Symfony's `#[IsGranted('...')]`, `#[IsSignatureValid]`, and `#[IsCsrfTokenValid(...)]` attributes allow

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-863#severity:medium
安全公告2026-05-27 发布INFO

Symfony's Cas2Handler Derives CAS service URL from Client Host Header → Cross-Service Ticket Replay

CVE-2026-45074

`Cas2Handler` builds this `service` parameter from `Request::getSchemeAndHttpHost()`, which reflects the attacker-contro

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-290#severity:medium
安全公告2026-05-27 发布INFO

Symfony Vulnerable to SQL Injection in PdoAdapter::doClear() via Unsanitized $prefix

CVE-2026-45073

### Description `Symfony\Component\Cache\Adapter\PdoAdapter` is the PDO-backed cache adapter. Its `clear($prefix)` meth

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-89#severity:medium
安全公告2026-05-27 发布INFO

Symfony Vulnerable to stored XSS in WebProfiler CodeExtension::fileExcerpt() — Unescaped Non-PHP File Rendering

CVE-2026-45072

### Description Symfony's profiler, a development only debug UI, renders source-code excerpts on several pages using Tw

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-79#severity:low
安全公告2026-05-27 发布INFO

Symfony has XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = true

CVE-2026-45071

### Description `symfony/dom-crawler` provides the `Crawler` class for navigating HTML/XML documents with CSS/XPath sel

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-611#severity:low
安全公告2026-05-27 发布INFO

Symfony has Email Header Injection via Non-Token Characters in Mime Parameter Names

CVE-2026-45070

### Description `Symfony\Component\Mime\Header\ParameterizedHeader` (and the related parameter handling reachable from

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-93#severity:medium
安全公告2026-05-27 发布INFO

Symfony's OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims

CVE-2026-45069

### Description `OidcTokenHandler` is Symfony's built-in access-token handler for OpenID Connect: it validates a bearer

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-345#cwe-1287#severity:medium
安全公告2026-05-27 发布INFO

Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address

CVE-2026-45068

### Description Symfony Mailer selects a transport via the `MAILER_DSN` environment variable / configuration (e.g. `smt

历史摘要 · 未重新核验 · GitHub Advisory

#advisory#composer#cwe-88#severity:medium