{"id":"GHSA-32rx-xvvr-4xv9","aliases":[],"status":"published","title":"easyadmin-extension-bundle action case insensitivity","description":"In alterphp/easyadmin-extension-bundle, role based access rules do not handle action name case sensitivity which may lead to unauthorized access.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-05-15T17:45:51Z","modified":"2024-11-29T05:30:47Z","fixes":[{"ecosystem":"Packagist","package":"alterphp/easyadmin-extension-bundle","fixed_in":["1.3.1","1.2.11"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"alterphp/easyadmin-extension-bundle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.3.0"},{"fixed":"1.3.1"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"alterphp/easyadmin-extension-bundle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.2.0"},{"fixed":"1.2.11"}]}]},{"source":"osv","ecosystem":"Packagist","package":"alterphp/easyadmin-extension-bundle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.3.0"},{"fixed":"1.3.1"}]}],"versions":["v1.3.0"]},{"source":"osv","ecosystem":"Packagist","package":"alterphp/easyadmin-extension-bundle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.2.0"},{"fixed":"1.2.11"}]}],"versions":["1.2.6","v1.2.1","v1.2.10","v1.2.2","v1.2.3","v1.2.4","v1.2.5","v1.2.7","v1.2.8","v1.2.9"]}],"references":[{"url":"https://github.com/alterphp/EasyAdminExtensionBundle/commit/68407ca5be644d1c53fb894453df951230afc6dc","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/alterphp/easyadmin-extension-bundle/2018-10-02.yaml","tags":["web"]},{"url":"https://github.com/alterphp/EasyAdminExtensionBundle/releases/tag/v1.3.1","tags":["web"]},{"url":"https://github.com/advisories/GHSA-32rx-xvvr-4xv9"}],"sources":{"ghsa":[{"id":"GHSA-32rx-xvvr-4xv9","title":"easyadmin-extension-bundle action case insensitivity","description":"In alterphp/easyadmin-extension-bundle, role based access rules do not handle action name case sensitivity which may lead to unauthorized access.","status":"published","published":"2024-05-15T17:45:51Z","modified":"2024-05-15T17:45:52Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high"}],"updated_at":"2026-11-02T14:37:49.48194Z"}],"osv":[{"id":"GHSA-32rx-xvvr-4xv9","title":"easyadmin-extension-bundle action case insensitivity","description":"In alterphp/easyadmin-extension-bundle, role based access rules do not handle action name case sensitivity which may lead to unauthorized access.","status":"published","published":"2024-05-15T17:45:51Z","modified":"2024-11-29T05:30:47.362576Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high"}],"updated_at":"2026-11-02T15:46:35.050232Z"}]}}