Home > Vulnerability Database > WS-2019-0362

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

WS-2019-0362

Good to know:

Date: January 1, 2020

A vulnerability was found in QR Code Bundle before prior to version 3.4.2. There is a disclosure of files via logo_path query parameter.

Language: PHP

Severity Score

5.3

Related Resources (3)

Url: https://github.com/endroid/qr-code-bundle/compare/3.4.1...3.4.2

Url: https://github.com/FriendsOfPHP/security-advisories/commit/b0769ae8ff95afb4544a23193b76438c6ba7e897

Url: https://www.mend.io/vulnerability-database/WS-2019-0362

Severity Score

5.3

Weakness Type (CWE)

Code

CWE-17

Top Fix

Upgrade Version

Upgrade to version 3.4.2

CVSS v3.1

Base Score:	5.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

Do you need more information?

Contact Us