sensiolabs

An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7.

An issue was discovered in Http Foundation in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2.

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution.

Symfony before 2.8.6 and 3.x before 3.0.6 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind.

An issue was discovered in Symfony before 4.2.12 and 4.3.x before 4.3.8.

An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7.

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not v…

Certain Symfony products are affected by: Incorrect Access Control.

The Symfony HtmlSanitizer component UrlSanitizer parses URLs differently from browsers, allowing the allowLinkHosts() and allowMediaHosts() checks to be bypassed for URLs without a well-formed authority, resulting in unt…

Symfony is a PHP framework for web and console applications and a set of reusable PHP components.

Symfony is a PHP framework for web and console applications and a set of reusable PHP components.

Symfony is a PHP framework for web and console applications and a set of reusable PHP components.

Symfony is a PHP framework for web and console applications and a set of reusable PHP components.

Symfony is a PHP framework for web and console applications and a set of reusable PHP components.

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth.

In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure() recursed through lexInlineMapping() and lexInlineSequence() for every { and [ of an inline collection, without enteri…

Symfony is a PHP framework for web and console applications and a set of reusable PHP components.

Symfony is a PHP framework for web and console applications and a set of reusable PHP components.

Symfony is a PHP framework for web and console applications and a set of reusable PHP components.

Symfony is a PHP framework for web and console applications and a set of reusable PHP components.

In Symfony before versions 4.4.13 and 5.1.5, the CachingHttpClient class from the HttpClient Symfony component relies on the HttpCache class to handle requests.

Symfony is a PHP framework for web and console applications and a set of reusable PHP components.

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes.

Symfony is a PHP framework for web and console applications and a set of reusable PHP components.

Symfony is a PHP framework for web and console applications and a set of reusable PHP components.