Lucene search
+L

6 matches found

AstraLinux
AstraLinux
•added 2025/02/11 7:35 a.m.•14 views

Astra Linux – Vulnerability in symfony

symfony/validator is a module for the Symphony PHP framework that provides tools for validating values. It’s possible to trick a Validator configured with a regular expression using the $ metacharacter, especially when the input ends with \n. Starting from versions 5.4.43, 6.4.11, and 7.1.4,...

3.1CVSS5.8AI score0.00455EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/11/06 9:00 p.m.•41 views

CVE-2024-50343 Incorrect response from Validator when input ends with `\n` in symfony/validator

symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to trick a Validator configured with a regular expression using the $ metacharacters, with an input ending with \n. Symfony as of versions 5.4.43, 6.4.11, and 7.1.4 now uses the D...

3.1CVSS0.00455EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2024/11/06 9:00 p.m.•30 views

CVE-2024-50343

symfony/validator is a module for the Symphony PHP framework which provides tools to validate values. It is possible to trick a Validator configured with a regular expression using the $ metacharacters, with an input ending with \n. Symfony as of versions 5.4.43, 6.4.11, and 7.1.4 now uses the D...

3.1CVSS4.6AI score0.00455EPSS
SaveExploits0
OSV
OSV
•added 2024/11/06 3:21 p.m.•22 views

GHSA-G3RH-RRHP-JHH9 Symfony has an incorrect response from Validator when input ends with `\n`

Description It is possible to trick a Validator configured with a regular expression using the $ metacharacters, with an input ending with \n. Resolution Symfony now uses the D regex modifier to match the entire input. The patch for this issue is available here for branch 5.4. Credits We would li...

3.1CVSS3.8AI score0.00455EPSS
SaveExploits0References8
OSV
OSV
•added 2006/06/07 12:02 a.m.•9 views

DEBIAN-CVE-2006-2878

The spellchecker spellcheck.php in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" that is inserted into a regular expression that is processed by pregreplace with the /e executable modifier...

7.5CVSS7.4AI score0.13925EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/26 12:00 a.m.•7 views

CVE-2006-2059: Undefined Security Weakness

actionpublic/search.php in Invision Power Board IPB 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary PHP code via a search with a crafted value of the lastdate parameter, which alters the behavior of a regular expression to add a "e" execute modifier...

5CVSS6.4AI score0.07853EPSS
SaveExploits1References1
Rows per page
Query Builder