sensiolabs

Records108All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high42CVSS 7.0–8.9

Exploited now

sensiolabs records in CISA KEV

No sensiolabs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Symfony 89 records HIGH Httpclient 2 records MEDIUM Httpfoundation 1 record LOW

Records

2 records in Httpclient · all components

TI-2020-11869 CVE-2020-15094 · GHSA-754h-5r27-7x3r

RCE in Symfony

MEDIUM 44

In Symfony before versions 4.4.13 and 5.1.5, the CachingHttpClient class from the HttpClient Symfony component relies on the HttpCache class to handle requests.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03043 Published 2020-09-02 Fixed in 4.4.13, 5.1.5 CWE-212

TI-2024-33777 CVE-2024-50342 · GHSA-9c3x-r3wp-mgxm

Internal address and port enumeration allowed by NoPrivateNetworkHttpClient in symfony/http-client

LOW 20

symfony/http-client is a module for the Symphony PHP framework which provides powerful methods to fetch HTTP resources synchronously or asynchronously.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00471 Published 2024-11-06 Fixed in 5.4.46, 6.4.14 +4 CWE-200

Open these records in search →