Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4259
HistoryMay 19, 2017 - 7:45 a.m.

Remote Code Execution (RCE)

2017-05-1907:45:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

0.021 Low

EPSS

Percentile

89.2%

symphonycms/symphony-2 is vulnerable to remote code execution (RCE). This is due to a lack of sanitization on user input strings, allowing a malicious user to inject and execute arbitrary script through symphony/content/content.blueprintsdatasources.php.

CPENameOperatorVersion
symphonycms/symphony-2le2.6.11

0.021 Low

EPSS

Percentile

89.2%

Related for VERACODE:4259