PT-2024-40038 · Unknown · Alterphp/Easyadmin-Extension-Bundle

Published 2024-05-15 · Updated 2024-05-15

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions alterphp/easyadmin-extension-bundle (affected versions not specified)

Description The issue concerns role-based access rules not handling action name case sensitivity, potentially leading to unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-32RX-XVVR-4XV9

Affected Products

Alterphp/Easyadmin-Extension-Bundle

References · 4

• https://osv.dev/vulnerability/GHSA-32rx-xvvr-4xv9 · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/alterphp/easyadmin-extension-bundle/2018-10-02.yaml · Note
• https://github.com/alterphp/EasyAdminExtensionBundle/commit/68407ca5be644d1c53fb894453df951230afc6dc · Note
• https://github.com/alterphp/EasyAdminExtensionBundle/releases/tag/v1.3.1 · Note