Lucene search
K

10 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.9 views

Astra Linux - уязвимость в symfony

Symfony is a PHP framework for web and console applications, along with a set of reusable PHP components. The Symfony HTTP cache system functions as a reverse proxy: it caches entire responses including headers and returns them to clients. In a recent change to the AbstractSessionListener,...

8.8CVSS7.1AI score0.00182EPSS
Exploits1References2
OSV
OSV
added 2024/03/06 11:7 a.m.26 views

BIT-SYMFONY-2022-24894

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The Symfony HTTP cache system, acts as a reverse proxy: It caches entire responses including headers and returns them to the clients. In a recent change in the AbstractSessionListener, the response...

8.8CVSS6.8AI score0.00182EPSS
Exploits1References3
Symfony
Symfony
added 2023/11/10 12:0 a.m.54 views

CVE-2023-46734: Potential XSS vulnerabilities in CodeExtension filters

Affected versions Symfony versions =2.0.0,4.4.51, =5.0.0,5.4.31, and =6.0.0,6.3.8 of the Symfony Twig Bridge are affected by this security issue. The issue has been fixed in Symfony 4.4.51, 5.4.31, 6.3.8. All other versions are not maintained anymore. Description Some filters in the CodeExtension...

6.1CVSS6AI score0.02588EPSS
Exploits0
Prion
Prion
added 2023/02/03 10:15 p.m.21 views

Design/Logic Flaw

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The Symfony HTTP cache system, acts as a reverse proxy: It caches entire responses including headers and returns them to the clients. In a recent change in the AbstractSessionListener, the response...

6.8CVSS8.5AI score0.00182EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/02/03 9:46 p.m.20 views

CVE-2022-24894 Symfony storing cookie headers in HttpCache

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The Symfony HTTP cache system, acts as a reverse proxy: It caches entire responses including headers and returns them to the clients. In a recent change in the AbstractSessionListener, the response...

5.9CVSS8.7AI score0.00182EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2023/02/03 9:46 p.m.21 views

CVE-2022-24894

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The Symfony HTTP cache system, acts as a reverse proxy: It caches entire responses including headers and returns them to the clients. In a recent change in the AbstractSessionListener, the response...

8.8CVSS8.6AI score0.00182EPSS
Exploits1
OSV
OSV
added 2023/02/03 9:46 p.m.24 views

CVE-2022-24894 Symfony storing cookie headers in HttpCache

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The Symfony HTTP cache system, acts as a reverse proxy: It caches entire responses including headers and returns them to the clients. In a recent change in the AbstractSessionListener, the response...

5.9CVSS7AI score0.00182EPSS
Exploits1References5
UbuntuCve
UbuntuCve
added 2023/02/03 12:0 a.m.35 views

CVE-2022-24894

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The Symfony HTTP cache system, acts as a reverse proxy: It caches entire responses including headers and returns them to the clients. In a recent change in the AbstractSessionListener, the response...

8.8CVSS6.8AI score0.00182EPSS
Exploits1References2
OSV
OSV
added 2021/11/24 9:1 p.m.29 views

GHSA-2XHG-W2G5-W95X CSV Injection in symfony/serializer

Description ----------- CSV Injection, also known as Formula Injection, occurs when websites embed untrusted input inside CSV files. When a spreadsheet program opens a CSV, any cell starting with = is interpreted by the software as a formula and could be abused by an attacker. In Symfony 4.1, we'...

6.5CVSS6.1AI score0.00871EPSS
Exploits0References13
Github Security Blog
Github Security Blog
added 2021/11/24 9:1 p.m.43 views

CSV Injection in symfony/serializer

Description ----------- CSV Injection, also known as Formula Injection, occurs when websites embed untrusted input inside CSV files. When a spreadsheet program opens a CSV, any cell starting with = is interpreted by the software as a formula and could be abused by an attacker. In Symfony 4.1, we'...

6.5CVSS1.4AI score0.00871EPSS
Exploits0References13Affected Software2
Rows per page
Query Builder