Symfony Directory Traversal

🗓️ 14 May 2022 01:21:16Reported by GitHub Advisory DatabaseType

Symfony Intl component Directory Traversal Issu

Reporter	Title	Published	Views	Family All 27
ATTACKERKB	CVE-2017-16654	6 Aug 201821:29	–	attackerkb
CVE	CVE-2017-16654	6 Aug 201821:00	–	cve
Cvelist	CVE-2017-16654	6 Aug 201821:00	–	cvelist
Debian	[SECURITY] [DLA 1707-1] symfony security update	10 Mar 201901:19	–	debian
Debian	[SECURITY] [DSA 4262-1] symfony security update	3 Aug 201816:32	–	debian
Debian CVE	CVE-2017-16654	6 Aug 201821:00	–	debiancve
Tenable Nessus	Debian DLA-1707-1 : symfony security update	11 Mar 201900:00	–	nessus
Tenable Nessus	Debian DSA-4262-1 : symfony - security update	6 Aug 201800:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2017-16654	18 Aug 202500:00	–	nessus
EUVD	EUVD-2022-3499	3 Oct 202520:07	–	euvd

Vulners

Node

symfony symfonyRange3.3.0–3.3.13composer

symfony symfonyRange3.0.0–3.2.14composer

symfony symfonyRange2.8.0–2.8.31composer

symfony symfonyRange2.7.0–2.7.38composer

symfony intlRange3.3.0–3.3.13composer

symfony intlRange3.0.0–3.2.14composer

symfony intlRange2.8.0–2.8.31composer

symfony intlRange2.7.0–2.7.38composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-16654
github	www.github.com/symfony/symfony/pull/24994
lists	www.lists.debian.org/debian-lts-announce/2019/03/msg00009.html
symfony	www.symfony.com/blog/cve-2017-16654-intl-bundle-readers-breaking-out-of-paths
debian	www.debian.org/security/2018/dsa-4262
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/intl/CVE-2017-16654.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2017-16654.yaml
symfony	www.symfony.com/cve-2017-16654
github	www.github.com/advisories/GHSA-c49r-8gj6-768r

07 Feb 2024 09:42Current

6.6Medium risk

Vulners AI Score6.6

CVSS 25

CVSS 37.5

EPSS0.00543