2128 matches found
CVE-2025-64500 Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the Request class improperly...
CVE-2025-64500
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the Request class improperly...
CVE-2025-64500
Affected component: Symfony HttpFoundation (Symfony PHP framework). Vulnerability: The Request class improperly interprets some PATH_INFO, allowing representation of URLs without a leading slash and potentially bypassing access-control rules that assume a leading “/”. Versions and root cause: Pri...
CVE-2025-64500 Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the Request class improperly...
Incorrect Authorization
Overview symfony/http-foundation is a component defines an object-oriented layer for the HTTP specification. Affected versions of this package are vulnerable to Incorrect Authorization due to the Request class improperly interpreting some PATHINFO in a way that leads to representing some URLs wit...
CVE-2025-64500
creationtimestamp| type| source ---|---|--- 2025-11-12 12:42:38+00:00| seen| https://bsky.app/profile/symfony.com/post/3m5gogrgryw26 2025-11-12 12:44:41+00:00| seen| https://bsky.app/profile/symfony.com/post/3m5gokg2mtg2l 2025-11-13 00:25:40+00:00| seen|...
PT-2025-46712
Name of the Vulnerable Software and Affected Versions Symfony versions 2.0.0 through 5.4.49 Symfony versions 6.0.0 through 6.4.28 Symfony versions 7.0.0 through 7.3.6 Description Symfony’s HttpFoundation component’s Request class incorrectly parses the PATH INFO value. This can result in URLs bei...
Symfony 安全漏洞
Symfony is a PHP framework for web and console applications and a set of reusable PHP components from Symfony, Inc. A security vulnerability exists in Symfony versions prior to 5.4.50, 6.4.29, and 7.3.7, which stems from improper parsing of PATHINFO and could lead to bypassing access control rule...
EUVD-2020-0351
Malware in sbrugna...
EUVD-2021-0960
Malware in sbrugna...
EUVD-2019-0806
Malware in sbrugna...
EUVD-2020-0317
Malware in sbrugna...
EUVD-2021-0756
Malware in sbrugna...
EUVD-2020-0350
Malware in sbrugna...
EUVD-2021-1396
Malware in sbrugna...
EUVD-2021-1467
Malware in sbrugna...
EUVD-2020-0300
Malware in sbrugna...
EUVD-2021-2377
Malware in sbrugna...