Количество 263
Количество 263
GHSA-xhh6-956q-4q69
Argument injection in a MimeTypeGuesser in Symfony
GHSA-x92h-wmg2-6hp7
Invalid HTTP method overrides allow possible XSS or other attacks in Symfony
GHSA-x3cf-w64x-4cp2
Symfony Path Disclosure
GHSA-wvj5-r78r-hhfq
Symfony Authentication Bypass
GHSA-whgv-8cg3-7hcm
Symphony Denial of Service Via Overlong Usernames
GHSA-w4rc-rx25-8m86
Improper Input Validation in Symfony
GHSA-w2fr-65vp-mxw3
Deserialization of untrusted data in Symfony
GHSA-vvmr-8829-6whx
CSRF token missing in Symfony
GHSA-rfcf-m67m-jcrq
Authentication granted to all firewalls instead of just one
GHSA-r7p7-qr7p-2rrf
Symfony Open Redirect
GHSA-r39x-jcww-82v6
Symfony's incorrect argument escaping under MSYS2/Git Bash can lead to destructive file operations on Windows
GHSA-r2rq-3h56-fqm4
Symfony DoS
GHSA-qw36-p97w-vcqr
Cookie persistence after password changes in symfony/security-bundle
GHSA-qq5c-677p-737q
Symfony vulnerable to command execution hijack on Windows with Process class
GHSA-qmqw-mpqp-mr54
Symfony Incorrect Access Control
GHSA-q8j7-fjh7-25v5
Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
GHSA-q8hg-pf8v-cxrv
Symfony Http-Kernel has non-constant time comparison in UriSigner
GHSA-q87v-q8fw-gmj5
Symfony Incorrect Access Control
GHSA-q3j3-w37x-hq2q
Webcache Poisoning in symfony/http-kernel
GHSA-mrqx-rp3w-jpjp
Symfony vulnerable to open redirect via browser-sanitized URLs
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-xhh6-956q-4q69 Argument injection in a MimeTypeGuesser in Symfony | CVSS3: 7.5 | 3% Низкий | около 6 лет назад |
| GHSA-x92h-wmg2-6hp7 Invalid HTTP method overrides allow possible XSS or other attacks in Symfony | CVSS3: 9.8 | 0% Низкий | около 6 лет назад |
| GHSA-x3cf-w64x-4cp2 Symfony Path Disclosure | CVSS3: 5.3 | 1% Низкий | больше 3 лет назад |
| GHSA-wvj5-r78r-hhfq Symfony Authentication Bypass | CVSS3: 9.8 | 0% Низкий | больше 3 лет назад |
| GHSA-whgv-8cg3-7hcm Symphony Denial of Service Via Overlong Usernames | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| GHSA-w4rc-rx25-8m86 Improper Input Validation in Symfony | CVSS3: 9.8 | 5% Низкий | почти 6 лет назад |
| GHSA-w2fr-65vp-mxw3 Deserialization of untrusted data in Symfony | CVSS3: 7.1 | 1% Низкий | почти 6 лет назад |
| GHSA-vvmr-8829-6whx CSRF token missing in Symfony | CVSS3: 8.1 | 0% Низкий | около 4 лет назад |
| GHSA-rfcf-m67m-jcrq Authentication granted to all firewalls instead of just one | CVSS3: 6.8 | 1% Низкий | больше 4 лет назад |
| GHSA-r7p7-qr7p-2rrf Symfony Open Redirect | CVSS3: 6.1 | 0% Низкий | больше 3 лет назад |
| GHSA-r39x-jcww-82v6 Symfony's incorrect argument escaping under MSYS2/Git Bash can lead to destructive file operations on Windows | CVSS3: 6.3 | 0% Низкий | 12 дней назад |
| GHSA-r2rq-3h56-fqm4 Symfony DoS | CVSS3: 5.9 | 1% Низкий | больше 3 лет назад |
| GHSA-qw36-p97w-vcqr Cookie persistence after password changes in symfony/security-bundle | CVSS3: 6.5 | 0% Низкий | около 4 лет назад |
| GHSA-qq5c-677p-737q Symfony vulnerable to command execution hijack on Windows with Process class | CVSS3: 8.4 | 1% Низкий | больше 1 года назад |
| GHSA-qmqw-mpqp-mr54 Symfony Incorrect Access Control | 76% Высокий | больше 3 лет назад | |
| GHSA-q8j7-fjh7-25v5 Symfony collectionCascaded and collectionCascadedDeeply fields security bypass | CVSS3: 8.1 | 1% Низкий | почти 4 года назад |
| GHSA-q8hg-pf8v-cxrv Symfony Http-Kernel has non-constant time comparison in UriSigner | CVSS3: 8.1 | 1% Низкий | почти 4 года назад |
| GHSA-q87v-q8fw-gmj5 Symfony Incorrect Access Control | CVSS3: 9.8 | 0% Низкий | больше 3 лет назад |
| GHSA-q3j3-w37x-hq2q Webcache Poisoning in symfony/http-kernel | CVSS3: 6.5 | 0% Низкий | около 4 лет назад |
| GHSA-mrqx-rp3w-jpjp Symfony vulnerable to open redirect via browser-sanitized URLs | CVSS3: 3.1 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу