Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Symfony Service IDs Allow Injection

🗓️ 18 Nov 2019 17:27:31Reported by GitHub Advisory DatabaseType 
github
 github🔗 github.com👁 32 Views

Symfony Service IDs Allow Injectio

Related
Detection
Refs
ReporterTitlePublishedViews
Family
FreeBSD		drupal -- Drupal core - Moderately critical
17 Apr 201900:00
–freebsd
BDU FSTEC		The vulnerability of the “symfony/dependency-injection” service identifier on the Symfony software platform for web application development and management arises from the lack of protective measures for SQL query structures. This allows attackers to execute arbitrary code through SQL injection attacks.
1 Oct 201900:00
–bdu_fstec
Circl		CVE-2019-10910
16 May 201922:51
–circl
CNVD		Drupal Code Execution Vulnerability (CNVD-2019-13248)
22 Apr 201900:00
–cnvd
CVE		CVE-2019-10910
16 May 201921:31
–cve
Cvelist		CVE-2019-10910
16 May 201921:31
–cvelist
Debian		[SECURITY] [DLA 1778-1] symfony security update
6 May 201919:15
–debian
Debian		[SECURITY] [DSA 4441-1] symfony security update
10 May 201906:26
–debian
Debian		[SECURITY] [DSA 4441-1] symfony security update
10 May 201906:26
–debian
Debian CVE		CVE-2019-10910
16 May 201921:31
–debiancve
Rows per page
Vulners
Node
symfonysymfonyRange4.2.0–4.2.7composer
OR
symfonysymfonyRange4.0.0–4.1.12composer
OR
symfonysymfonyRange3.0.0–3.4.26composer
OR
symfonysymfonyRange2.8.0–2.8.50composer
OR
symfonysymfonyRange2.7.0–2.7.51composer
OR
symfonyproxy-manager-bridgeRange4.2.0–4.2.7composer
OR
symfonyproxy-manager-bridgeRange4.0.0–4.1.12composer
OR
symfonyproxy-manager-bridgeRange3.0.0–3.4.26composer
OR
symfonyproxy-manager-bridgeRange2.8.0–2.8.50composer
OR
symfonyproxy-manager-bridgeRange2.7.0–2.7.51composer
OR
symfonydependency-injectionRange4.2.0–4.2.7composer
OR
symfonydependency-injectionRange4.0.0–4.1.12composer
OR
symfonydependency-injectionRange3.0.0–3.4.26composer
OR
symfonydependency-injectionRange2.8.0–2.8.50composer
OR
symfonydependency-injectionRange2.7.0–2.7.51composer
SourceLink
nvdwww.nvd.nist.gov/vuln/detail/CVE-2019-10910
githubwww.github.com/symfony/symfony/commit/d2fb5893923292a1da7985f0b56960b5bb10737b
githubwww.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/dependency-injection/CVE-2019-10910.yaml
symfonywww.symfony.com/blog/cve-2019-10910-check-service-ids-are-valid
symfonywww.symfony.com/cve-2019-10910
synologywww.synology.com/security/advisory/Synology_SA_19_19
githubwww.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/proxy-manager-bridge/CVE-2019-10910.yaml
githubwww.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2019-10910.yaml
githubwww.github.com/symfony/symfony/commit/3876c75f858d5d82e2c309698d21af2f1d721afb
githubwww.github.com/symfony/symfony/commit/4c80c3444854ef384df94deb4acbcef4b5e5243b
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
29 May 2025 22:51Current
10High risk
Vulners AI Score10
CVSS 27.5
CVSS 3.19.8
EPSS0.11901
CWE-89
symfonyservice idssql injectionremote code executiondependency injection
32