Directory Traversal

Symphony is vulnerable to directory traversal attacks. The read function in the bundle readers does not sanitize user input, allowing a malicious user to traverse the directory...

CVE-2017-16654: Intl bundle readers breaking out of paths

More info at https://symfony.com/cve-2017-16654...