EUVD-2022-4919

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Certain Symfony products have incorrect access control affecting remote password validation issues.

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2017-11365	23 May 201918:48	–	circl
CNVD	Sensio Labs Symfony Password validator Access Control Error Vulnerability	27 May 201900:00	–	cnvd
CVE	CVE-2017-11365	23 May 201917:20	–	cve
Cvelist	CVE-2017-11365	23 May 201917:20	–	cvelist
Debian CVE	CVE-2017-11365	23 May 201917:20	–	debiancve
Friends Of PHP	CVE-2017-11365: Empty passwords validation issue	17 Jul 201710:54	–	friendsofphp
Friends Of PHP	CVE-2017-11365: Empty passwords validation issue	17 Jul 201710:54	–	friendsofphp
Friends Of PHP	CVE-2017-11365: Empty passwords validation issue	17 Jul 201710:54	–	friendsofphp
Github Security Blog	Symfony Incorrect Access Control	24 May 202216:46	–	github
NVD	CVE-2017-11365	23 May 201918:29	–	nvd

[
  {
    "enisaIdVendor": [
      {
        "id": "7668706d-e38e-34a9-870c-abc68958804b",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "584fb2bc-8d42-3a11-a32e-2a32f9256486",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-11365
github	www.github.com/symfony/symfony/pull/23507
github	www.github.com/symfony/symfony/commit/878198cefae028386c6dc800ccbf18f2b9cbff3f
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-core/CVE-2017-11365.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2017-11365.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2017-11365.yaml
github	www.github.com/symfony/symfony
symfony	www.symfony.com/blog/cve-2017-11365-empty-passwords-validation-issue
symfony	www.symfony.com/cve-2017-11365

03 Oct 2025 20:07Current

9.3High risk

Vulners AI Score9.3

CVSS 39.8

CVSS 27.5

EPSS0.00356