Lucene search
K

7 matches found

Snyk
Snyk
added 2026/05/20 3:35 p.m.4 views

Arbitrary Argument Injection

Overview symfony/runtime is an Enables decoupling PHP applications from global state Affected versions of this package are vulnerable to Arbitrary Argument Injection via SymfonyRuntime::getInput when registerargcargv=On in web SAPIs. An attacker can modify the Symfony application environment and...

5.4CVSS5.8AI score
Exploits0References2
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.1 views

Astra Linux - уязвимость в symfony

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

7.3CVSS6.9AI score0.88664EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/02/05 6:41 a.m.6 views

CVE-2024-50340

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

7.3CVSS7AI score0.88664EPSS
Exploits0
Veracode
Veracode
added 2024/11/20 3:48 a.m.17 views

Local File Inclusion (LFI)

symfony/runtime is vulnerable to Local File Inclusion LFI. The vulnerability is due to improper handling of the argv values in non-SAPI PHP runtimes, where the registerargvargc directive is set to on, allowing attackers to craft query strings that modify the environment or debug settings used by...

7.3CVSS6.6AI score0.88664EPSS
Exploits0References5Affected Software2
OSV
OSV
added 2024/11/06 9:15 p.m.1 views

DEBIAN-CVE-2024-50340

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

7.3CVSS7.3AI score0.88664EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/06 9:9 p.m.21 views

CVE-2024-50340 Ability to change environment from query in symfony/runtime

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

7.3CVSS7.1AI score0.88664EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/11/06 9:9 p.m.204 views

CVE-2024-50340 Ability to change environment from query in symfony/runtime

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

7.3CVSS0.88664EPSS
Exploits0References2
Rows per page
Query Builder