Lucene search
K

8 matches found

Github Security Blog
Github Security Blog
added 2026/05/27 9:9 p.m.16 views

Symfony has XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = true

Description symfony/dom-crawler provides the Crawler class for navigating HTML/XML documents with CSS/XPath selectors; symfony/browser-kit's HttpBrowser uses it to parse fetched pages. Crawler::addXmlContent sets DOMDocument::$validateOnParse = true before calling loadXML. Setting validateOnParse...

5.8AI score0.00052EPSS
Exploits0References6Affected Software2
OSV
OSV
added 2026/05/27 9:9 p.m.2 views

GHSA-X6G4-FWCC-JJ8W Symfony has XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = true

Description symfony/dom-crawler provides the Crawler class for navigating HTML/XML documents with CSS/XPath selectors; symfony/browser-kit's HttpBrowser uses it to parse fetched pages. Crawler::addXmlContent sets DOMDocument::$validateOnParse = true before calling loadXML. Setting validateOnParse...

5.3CVSS5.8AI score0.00052EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2014/09/23 12:0 a.m.37 views

Fedora 21 : php-symfony-2.5.4-1.fc21 (2014-10239)

2.5.4 2014-09-03 - security 11832 CVE-2014-6072 fabpot - security 11831 CVE-2014-5245 stof - security 11830 CVE-2014-4931 aitboudad, Jeremy Derusse - security 11829 CVE-2014-6061 damz, fabpot - security 11828 CVE-2014-5244 nicolas-grekas, larowlan - bug 10197 FrameworkBundle PhpExtractor bugfix a...

5.4AI score0.01663EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/12/17 12:0 a.m.22 views

Fedora Update for php-symfony2-DomCrawler FEDORA-2013-22422

Check for the Version of php-symfony2-DomCrawler OpenVAS Vulnerability Test Fedora Update for php-symfony2-DomCrawler FEDORA-2013-22422 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute...

5CVSS6.3AI score0.01868EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/12/17 12:0 a.m.11 views

Fedora Update for php-symfony2-DomCrawler FEDORA-2013-22422

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.4AI score0.01868EPSS
Exploits0References2
Fedora
Fedora
added 2013/12/09 2:0 a.m.22 views

[SECURITY] Fedora 18 Update: php-symfony2-DomCrawler-2.2.10-1.fc18

The DomCrawler Component eases DOM navigation for HTML and XML documents...

5CVSS0.7AI score0.01868EPSS
Exploits0
Friends Of PHP
Friends Of PHP
added 1970/01/01 12:0 a.m.9 views

CVE-2026-45071: XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = true

More info at https://symfony.com/cve-2026-45071...

5.8AI score0.00052EPSS
Exploits0Affected Software1
Friends Of PHP
Friends Of PHP
added 1970/01/01 12:0 a.m.3 views

CVE-2026-45071: XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = true

More info at https://symfony.com/cve-2026-45071...

5.8AI score0.00052EPSS
Exploits0Affected Software1
Rows per page
Query Builder