CVE-2017-11365

🗓️ 23 May 2019 17:20:57Reported by MendType

Remote incorrect access control in Symfony Password validator.

Reporter	Title	Published	Views	Family All 21
Circl	CVE-2017-11365	23 May 201918:48	–	circl
CNVD	Sensio Labs Symfony Password validator Access Control Error Vulnerability	27 May 201900:00	–	cnvd
CVE	CVE-2017-11365	23 May 201917:20	–	cve
Cvelist	CVE-2017-11365	23 May 201917:20	–	cvelist
Debian CVE	CVE-2017-11365	23 May 201917:20	–	debiancve
EUVD	EUVD-2022-4919	3 Oct 202520:07	–	euvd
Friends Of PHP	CVE-2017-11365: Empty passwords validation issue	17 Jul 201710:54	–	friendsofphp
Friends Of PHP	CVE-2017-11365: Empty passwords validation issue	17 Jul 201710:54	–	friendsofphp
Friends Of PHP	CVE-2017-11365: Empty passwords validation issue	17 Jul 201710:54	–	friendsofphp
Github Security Blog	Symfony Incorrect Access Control	24 May 202216:46	–	github

Vulners

Node

sensiolabs symfonyRange2.8.23–2.8.25

sensiolabs symfonyRange3.3.3–3.3.5

sensiolabs symfonyRange2.7.30–2.7.32

sensiolabs symfonyRange3.2.10–3.2.12

Source	Link
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2017-11365.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2017-11365.yaml
github	www.github.com/symfony/symfony/pull/23507
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-core/CVE-2017-11365.yaml
symfony	www.symfony.com/cve-2017-11365
github	www.github.com/symfony/symfony
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-11365
symfony	www.symfony.com/blog/cve-2017-11365-empty-passwords-validation-issue
github	www.github.com/symfony/symfony/commit/878198cefae028386c6dc800ccbf18f2b9cbff3f

06 Oct 2026 02:37Current

CVSS 49.3

CVSS 3.19.8

CVSS 27.5

CVSS 39.8

EPSS0.01855