Lucene search
+L

1 matches found

CVE
CVE
added 2026/07/17 4:10 p.m.32 views

CVE-2026-49208

CVE-2026-49208 (Symfony UX LiveComponent) : Vulnerability occurs when a writable #[LiveProp] is typed as DateTimeInterface with no explicit format, allowing client-supplied strings like now/tomorrow/+10 years to bypass checks via LiveComponentHydrator::hydrateObjectValue(), effectively moving tim...

6.9CVSS5.2AI score0.0024EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder