CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Veracode•added 2019/11/18 3:53 a.m.•33 views

Remote Code Execution

symfony/symfony is vulnerable to remote code execution. When an instance of TagAwareAdapter is deserialized, Symfony executes callables stored in privates properties in order to invalidates tags. When the instance has been created by unserializing an external payload, those properties are not...

9.8CVSS4AI score0.33247EPSS

SaveExploits0References5Affected Software1

Friends Of PHP•added 1970/01/01 12:0 a.m.•28 views

CVE-2019-18889: Forbid serializing AbstractAdapter and TagAwareAdapter instances

More info at https://symfony.com/cve-2019-18889...

9.8CVSS7.2AI score0.33247EPSS

SaveExploits0Affected Software1

Friends Of PHP•added 1970/01/01 12:0 a.m.•27 views

CVE-2019-18889: Forbid serializing AbstractAdapter and TagAwareAdapter instances

More info at https://symfony.com/cve-2019-18889...

9.8CVSS7.2AI score0.33247EPSS

SaveExploits0Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by