Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Sulu checks fix permissions for subentities endpoints
Vulnerability Description
Sulu is an open-source PHP content management system based on the Symfony framework. From versions 1.0.0 to before 2.6.22, and 3.0.0 to before 3.0.5, a user which has permission for the Sulu Admin via at least one role could have access to the sub-entities of contacts via the admin API without even have permission for contacts. This issue has been patched in versions 2.6.22 and 3.0.5.
CVSS Information
N/A
Vulnerability Type
使用候选路径或通道进行的认证绕过
Vulnerability Title
Sulu 安全漏洞
Vulnerability Description
Sulu是奥地利Sulu公司的一款可扩展的、基于PHP的开源内容管理系统上的Symfony框架。 Sulu 1.0.0至2.6.22之前版本和3.0.0至3.0.5之前版本存在安全漏洞，该漏洞源于权限检查不当，可能导致通过管理API越权访问联系人子实体。
CVSS Information
N/A
Vulnerability Type
N/A