UpHeron
All vulnerabilities

Servers and applications

CVE-2022-24742

Sylius is an open source eCommerce platform. Prior to versions 1.9.10, 1.10.11, and 1.11.2, any other user can view the data if browser tab remains unclosed after log out. The issue is fixed in versions 1.9.10, 1.10.11, and 1.11.2. A workaround is available. The application must strictly redirect to login page even browser back button is pressed. Another possibility is to set more strict cache…

Severity
Medium 5.5
Published
14 Mar 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.9.10, 1.10.11, 1.11.2
Sources
NVD

Affected software

SoftwareAffected versions
SyliusServers and applications · cpe:a:sylius:sylius
  • Every version before 1.9.10
  • From 1.10.0 before 1.10.11
  • From 1.11.0 before 1.11.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-24742
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-24742