symfony vulnerabilities (Debian)
102 vulnerabilities.
-
symfonyDebian Symfony: XXE (Local File Read) in Config XmlUtils::parse() via validateOnParse = true 2.3 Low -
symfonyDebian Symfony: ObjectNormalizer Dotted-Key Property-Path Traversal Bypasses #[Ignore] on Nested Objects 6.9 Medium -
symfonyDebian Symfony: DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server File 8.2 High -
symfonyDebian Symfony: Exponential and Quadratic Parse Times in the YAML Parser Let a Single Document Hold a Process 8.7 High -
symfonyDebian Symfony: Inline Fragments Let Untrusted Forwarded Headers Set the Host, Scheme and Port of the URLs Generated for the Main Request 2.3 Low -
symfonyDebian Symfony: Programmatic Logins Skip the checkPostAuth() Method of User Checkers 2.3 Low -
symfonyDebian Symfony: HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass 2.3 Low -
symfonyDebian Symfony: Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses allowing SSRF Filter Bypass 6.3 Medium -
symfonyDebian Symfony: NoPrivateNetworkHttpClient Does Not Pin the Checked IP of Cached Hosts, Letting DNS Rebinding Enumerate Internal Ports (Incomplete Fix for CVE-2024-50342) 2.3 Low -
symfonyDebian Symfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority (Incomplete Fix for CVE-2026-45066) 2.3 Low -
symfonyDebian Symfony: The Serializer Builds UploadedFile Objects From Request Data, Letting a Client Point an Upload at Any Server File 8.4 High -
symfonyDebian Symfony: HEAD Requests Bypass the methods Option of security.access_control Rules and Firewalls 6.3 Medium -
symfonyDebian Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References 8.2 High -
symfonyDebian Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for CVE-2026-48761) 5.3 Medium -
symfonyDebian Symfony: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Control 6.3 Medium -
symfonyDebian Symfony: X.509 Authentication Impersonation via DN Value Injection (incomplete fix for CVE-2026-45063) 7.7 High -
symfonyDebian Symfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process 8.7 High -
symfonyDebian Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document Crash the Process 8.7 High -
symfonyDebian Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header 8.7 High -
symfonyDebian Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization 5.1 Medium -
symfonyDebian Symfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense 5.3 Medium -
symfonyDebian Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade 6.3 Medium -
symfonyDebian Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient 6.9 Medium -
symfonyDebian Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes 8.7 High -
symfonyDebian Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes on <object>, <applet>, <iframe>, <img> and the URL Inside <meta http-equiv="refresh"> content 5.3 Medium -
symfonyDebian Symfony: SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch 8.3 High -
symfonyDebian Symfony: Twilio Notifier Webhook Parser Never Verifies the X-Twilio-Signature HMAC: Unauthenticated Webhook Event Injection 6.9 Medium -
symfonyDebian Symfony: JsonPath Evaluates Attacker-Controlled Regular Expressions in match()/search() Without Limits — ReDoS 8.2 High -
symfonyDebian Symfony: Mailtrap Mailer Webhook Parser Never Verifies the X-Mt-Signature HMAC — Unauthenticated Webhook Event Injection 6.9 Medium -
symfonyDebian Symfony: Mailjet Mailer Webhook Parser Never Verifies the Configured Secret — Unauthenticated Webhook Event Injection 6.9 Medium -
symfonyDebian Symfony: HtmlSanitizer UrlAttributeSanitizer Omits action/formaction/poster/cite — javascript: URI Survives Sanitization (XSS) 2.1 Low -
symfonyDebian Symfony: YAML Parser ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex 8.7 High -
symfonyDebian Symfony: YAML Parser Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs") 8.7 High -
symfonyDebian Symfony: [Yaml] Harden the parser when handling untrusted input 8.2 High -
symfonyDebian Symfony: Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener 8.3 High -
symfonyDebian Symfony: HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid] 8.3 High -
symfonyDebian Symfony: Cas2Handler Derives CAS service URL from Client Host Header → Cross-Service Ticket Replay 7.6 High -
symfonyDebian Symfony: SQL Injection in PdoAdapter::doClear() via Unsanitized $prefix 6.3 Medium -
symfonyDebian Symfony: Stored XSS in WebProfiler CodeExtension::fileExcerpt() — Unescaped Non-PHP File Rendering 2.0 Low -
symfonyDebian Symfony: XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = true 8.7 High -
symfonyDebian Symfony: Email Header Injection via Non-Token Characters in Mime Parameter Names 6.3 Medium -
symfonyDebian Symfony: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims 8.8 High -
symfonyDebian Symfony: Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address 8.7 High -
symfonyDebian Symfony: Email Header / SMTP Command Injection via CRLF in Symfony\Component\Mime\Address 6.3 Medium -
symfonyDebian Symfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URL-Parser Differentials and <area> Misclassification 2.3 Low -
symfonyDebian Symfony: HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href Spoofing 2.3 Low -
symfonyDebian Symfony: UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection 2.3 Low -
symfonyDebian Symfony: Identity Spoofing via Unanchored DN Regex in X509Authenticator 9.1 Critical -
symfonyDebian [Unknown description] No score -
symfonyDebian Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass 7.3 High - Show olderLoading…