2 matches found
CVE-2012-6431
Symfony 2.0.x before 2.0.20 does not process URL encoded data consistently within the Routing and Security components, which allows remote attackers to bypass intended URI restrictions via a doubly encoded string...
6.4CVSS6.8AI score0.01876EPSS
SaveExploits0References1
ROS-20250212-16
A vulnerability in the Golang programming language is related to the fact that an HTTP client sends an Authorization header to a third-party domain after a chain of redirects in an uncontrolled consumption of resources. Authorization to a third-party domain after a chain of redirects with...
6.1CVSS6.5AI score0.00658EPSS
SaveExploits0
20