Lucene search

K
cvelistMitreCVELIST:CVE-2019-10909
HistoryMay 16, 2019 - 9:36 p.m.

CVE-2019-10909

2019-05-1621:36:10
mitre
raw.githubusercontent.com
2

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.2%

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, validation messages are not escaped, which can lead to XSS when user input is included. This is related to symfony/framework-bundle.

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.2%