EUVD-2019-0785

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Critical issue in Symfony cache serialization leading to remote code injection vulnerability

Reporter	Title	Published	Views	Family All 24
Circl	CVE-2019-18889	26 Feb 202410:12	–	circl
CNVD	Sensio Labs Symfony Code Injection Vulnerability	15 Nov 201900:00	–	cnvd
CVE	CVE-2019-18889	21 Nov 201922:21	–	cve
Cvelist	CVE-2019-18889	21 Nov 201922:21	–	cvelist
Debian	[SECURITY] [DSA 4573-1] symfony security update	18 Nov 201922:04	–	debian
Debian CVE	CVE-2019-18889	21 Nov 201922:21	–	debiancve
Tenable Nessus	Debian DSA-4573-1 : symfony - security update	20 Nov 201900:00	–	nessus
Tenable Nessus	Fedora 31 : php-symfony3 (2019-8b0ba02338)	22 Nov 201900:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2019-18889	27 Aug 202500:00	–	nessus
Fedora	[SECURITY] Fedora 31 Update: php-symfony3-3.4.35-2.fc31	22 Nov 201900:48	–	fedora

[
  {
    "enisaIdVendor": [
      {
        "id": "09a3234c-2a89-376e-bf2d-90ed4960171e",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a73de3fb-c5e7-3726-af9c-e0073367a489",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-18889
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/cache/CVE-2019-18889.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2019-18889.yaml
github	www.github.com/symfony/symfony/releases/tag/v4.3.8
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UED22BOXTL2SSFMGYKA64ZFHGLLJG3EA
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/UED22BOXTL2SSFMGYKA64ZFHGLLJG3EA
symfony	www.symfony.com/blog/cve-2019-18889-forbid-serializing-abstractadapter-and-tagawareadapter-instances
symfony	www.symfony.com/blog/symfony-4-3-8-released
symfony	www.symfony.com/cve-2019-18889
debian	www.debian.org/security/2019/dsa-4573

07 Oct 2025 00:30Current

9.2High risk

Vulners AI Score9.2

CVSS 3.19.8

CVSS 27.5

EPSS0.05134