Security

SECURITY.md

Security Policy

Supported Versions

Version	Supported
>= 2.4.0	✅
2.0 - 2.3	❌
1.6.x	✅
< 1.6	❌

Reporting a Vulnerability

You can contact us for security related issues by using security@sulu.io.

Access to pages is granted regardless of role permissions
GHSA-jr83-m233-gg6p published Mar 4, 2024 by alexander-schranz

Moderate
HTML Injection via Autocomplete Suggestion
GHSA-gfrh-gwqc-63cv published Feb 5, 2024 by alexander-schranz

Low
Observable Response Discrepancy on Admin Login
GHSA-wmwf-49vv-p3mr published Aug 3, 2023 by alexander-schranz

Moderate
Privilege escalation in the Sulu Admin panel
GHSA-84px-q68r-2fc9 published Dec 15, 2021 by alexander-schranz

Moderate
PHP file inclusion in the Sulu admin panel
GHSA-vx6j-pjrh-vgjh published Dec 15, 2021 by alexander-schranz

Moderate
XSS injection in Tag autocomplete was possible
GHSA-h58v-g3q6-q9fx published Oct 21, 2021 by alexander-schranz

Low
XSS Injection in Media Collection Title was possible
GHSA-gm2x-6475-g9r8 published Jul 2, 2021 by alexander-schranz

Low
Reset Password / Login vulnerability
GHSA-wfm4-pq59-wg6r published Aug 3, 2020 by danrot

Moderate

Learn more about advisories related to sulu/sulu in the GitHub Advisory Database