Lucene search
+L

5 matches found

AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.5 views

Astra Linux – Vulnerability in symfony

symfony/validator is a module for the Symphony PHP framework that provides tools for validating values. It’s possible to trick a Validator configured with a regular expression using the $ metacharacter, especially when the input ends with \n. Starting from versions 5.4.43, 6.4.11, and 7.1.4,...

3.1CVSS5.8AI score0.00465EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2024/11/06 9:0 p.m.14 views

CVE-2024-50343

symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to trick a Validator configured with a regular expression using the $ metacharacters, with an input ending with \n. Symfony as of versions 5.4.43, 6.4.11, and 7.1.4 now uses the D...

3.1CVSS4.6AI score0.00465EPSS
Exploits0
Cvelist
Cvelist
added 2024/11/06 9:0 p.m.30 views

CVE-2024-50343 Incorrect response from Validator when input ends with `\n` in symfony/validator

symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to trick a Validator configured with a regular expression using the $ metacharacters, with an input ending with \n. Symfony as of versions 5.4.43, 6.4.11, and 7.1.4 now uses the D...

3.1CVSS0.00465EPSS
Exploits0References2
OSV
OSV
added 2024/11/06 3:21 p.m.14 views

GHSA-G3RH-RRHP-JHH9 Symfony has an incorrect response from Validator when input ends with `\n`

Description It is possible to trick a Validator configured with a regular expression using the $ metacharacters, with an input ending with \n. Resolution Symfony now uses the D regex modifier to match the entire input. The patch for this issue is available here for branch 5.4. Credits We would li...

3.1CVSS3.8AI score0.00465EPSS
Exploits0References8
OSV
OSV
added 2006/06/07 12:2 a.m.2 views

DEBIAN-CVE-2006-2878

The spellchecker spellcheck.php in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" that is inserted into a regular expression that is processed by pregreplace with the /e executable modifier...

7.5CVSS7.4AI score0.13925EPSS
Exploits1References1
Rows per page
Query Builder