197 matches found
DEBIAN-CVE-2018-11406
An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. By default, a user's session is invalidated when the user is logged out. This behavior can be disabled through the...
UBUNTU-CVE-2017-16652
An issue was discovered in Symfony 2.7.x before 2.7.38, 2.8.x before 2.8.31, 3.2.x before 3.2.14, and 3.3.x before 3.3.13. DefaultAuthenticationSuccessHandler or DefaultAuthenticationFailureHandler takes the content of the targetpath parameter and generates a redirect response, but no check is...
Concrete5 CMS 5.7.3.1 - 'Application::dispatch' Method Local File Inclusion
------------------------------------------------------------------------------- Concrete5 installed 329. $response = $this-getEarlyDispatchResponse; 330. 331. if !isset$response 332. $collection = Route::getList; 333. $context = new \Symfony\Component\Routing\RequestContext; 334...
[SECURITY] Fedora 23 Update: php-doctrine-doctrine-bundle-1.5.2-1.fc23
Doctrine DBAL & ORM Bundle for the Symfony Framework. Optional: Doctrine ORM 2.3 =3D php-doctrine-orm 3.0 Symfony Web Profile Bundle 2.3 =3D php-symfony-web-profiler-bundle 4. 0 Twig 1.10 =3D php-twig 2.0...
[SECURITY] Fedora 22 Update: php-doctrine-doctrine-bundle-1.5.2-1.fc22
Doctrine DBAL & ORM Bundle for the Symfony Framework. Optional: Doctrine ORM 2.3 =3D php-doctrine-orm 3.0 Symfony Web Profile Bundle 2.3 =3D php-symfony-web-profiler-bundle 4. 0 Twig 1.10 =3D php-twig 2.0...
[SECURITY] Fedora 21 Update: php-doctrine-doctrine-bundle-1.5.2-1.fc21
Doctrine DBAL & ORM Bundle for the Symfony Framework. Optional: Doctrine ORM 2.3 =3D php-doctrine-orm 3.0 Symfony Web Profile Bundle 2.3 =3D php-symfony-web-profiler-bundle 4. 0 Twig 1.10 =3D php-twig 2.0...
DEBIAN-CVE-2015-2308
Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6 allows remote attackers to execute arbitrary PHP code via a language="php" attribute of a SCRIPT element...
UBUNTU-CVE-2015-2308
Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6 allows remote attackers to execute arbitrary PHP code via a language="php" attribute of a SCRIPT element...
Symfony vulnerable to code injection
Overview Symfony is an open source web application framework provided by SensioLabs. Symfony contains a code injection vulnerability. Applications with ESI support enabled and using the Symfony built-in reverse proxy the HttpCache class are affected. Takeshi Terada of Mitsui Bussan Secure...
symfony
This plugin greps every page for traces of the Symfony framework and the lack of CSRF protection. Plugin type Grep Options Name | Type | Default Value | Description | Help ---|---|---|---|--- override | boolean | False | Skip symfony detection and search for the csrf misprotection. | No detailed...
Fedora Update for php-symfony-symfony FEDORA-2012-19195
Check for the Version of php-symfony-symfony OpenVAS Vulnerability Test Fedora Update for php-symfony-symfony FEDORA-2012-19195 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...
[SECURITY] Fedora 18 Update: php-symfony-symfony-1.4.20-2.fc18
Symfony is a complete framework designed to optimize the development of web applications by way of several key features. For starters, it separates a w eb application's business rules, server logic, and presentation views. It contains numerous tools and classes aimed at shortening the development...
Fedora Update for php-symfony-symfony FEDORA-2012-8985
Check for the Version of php-symfony-symfony OpenVAS Vulnerability Test Fedora Update for php-symfony-symfony FEDORA-2012-8985 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...
Fedora Update for php-symfony-symfony FEDORA-2012-8911
Check for the Version of php-symfony-symfony OpenVAS Vulnerability Test Fedora Update for php-symfony-symfony FEDORA-2012-8911 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...
CVE-2024-50343: Incorrect response from Validator when input ends with ` `
More info at https://symfony.com/cve-2024-50343...