TI-2025-39892 CVE-2025-64500 · GHSA-3rg7-wf37-54rm
Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
Priority LOW 35
Symfony is a PHP framework for web and console applications and a set of reusable PHP components.
sensiolabs
Records108All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high42CVSS 7.0–8.9
Exploited now
sensiolabs records in CISA KEVNo sensiolabs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
1 record in Httpfoundation · all components