CVE-2020-15143.yaml

title: "CVE-2020-15143: Remote Code Execution in ParametersParser while using request parameters inside expression language"
link: https://github.com/Sylius/SyliusResourceBundle/security/advisories/GHSA-p4pj-9g59-4ppv
cve: CVE-2020-15143
branches:
    1.0.x:
        time: ~
        versions: ['>=1.0.0', '<1.1.0']
    1.1.x:
        time: ~
        versions: ['>=1.1.0', '<1.2.0']
    1.2.x:
        time: ~
        versions: ['>=1.2.0', '<1.3.0']
    1.3.x:
        time: 2020-08-18 09:05:00
        versions: ['>=1.3.0', '<1.3.14']
    1.4.x:
        time: 2020-08-18 09:05:00
        versions: ['>=1.4.0', '<1.4.7']
    1.5.x:
        time: 2020-08-18 09:05:00
        versions: ['>=1.5.0', '<1.5.2']
    1.6.x:
        time: 2020-08-18 09:05:00
        versions: ['>=1.6.0', '<1.6.4']
reference: composer://sylius/resource-bundle