symfony vulnerabilities (Debian)
102 vulnerabilities.
symfonyDebianWithdrawn Advisory: Symfony http-security has authentication bypass7.5 HighsymfonyDebianSymphony has an Authentication Bypass via RememberMe7.5 HighsymfonyDebianOpen redirect via browser-sanitized URLs in symfony/http-foundation3.1 LowsymfonyDebianIncorrect response from Validator when input ends with `\n` in symfony/validator3.1 LowsymfonyDebianInternal address and port enumeration allowed by NoPrivateNetworkHttpClient in symfony/http-client3.1 LowsymfonyDebianSecurity::login does not take into account custom user_checker in symfony/security-bundle3.1 LowsymfonyDebianAbility to change environment from query in symfony/runtime7.3 HighsymfonyDebianSymfony potential Cross-site Scripting vulnerabilities in CodeExtension filters6.1 MediumsymfonyDebianSymfony possible session fixation vulnerability6.5 MediumsymfonyDebianSymfony storing cookie headers in HttpCache5.9 MediumsymfonyDebianSymfony vulnerable to Session Fixation of CSRF tokens6.3 MediumsymfonyDebianCSV Injection in Symfony6.5 MediumsymfonyDebianPrevent user enumeration using Guard or the new Authenticator-based Security5.3 MediumsymfonyDebianRCE in Symfony8.0 HighsymfonyDebianFirewall configured with unanimous strategy was not actually unanimous in symfony/security-http7.6 HighsymfonyDebianExceptions displayed in non-debug configurations in Symfony4.6 MediumsymfonyDebianPrevent cache poisoning via a Response Content-Type header2.6 LowsymfonyDebianSymfony Unsafe Cache Serialization Could Enable RCE9.8 CriticalsymfonyDebianImproper Input Validation in Symfony9.8 CriticalsymfonyDebianArgument injection in a MimeTypeGuesser in Symfony7.5 HighsymfonyDebianSymfony Http-Kernel has non-constant time comparison in UriSigner8.1 HighsymfonyDebianUser enumeration leak using switch user functionality in Symfony5.3 MediumsymfonyDebianDeserialization of untrusted data in Symfony7.1 HighsymfonyDebianInvalid HTTP method overrides allow possible XSS or other attacks in Symfony9.8 CriticalsymfonyDebianImproper authentication in Symfony7.5 HighsymfonyDebianSymfony Service IDs Allow Injection9.8 CriticalsymfonyDebianSymfony Cross-site Scripting (XSS) vulnerability5.4 MediumsymfonyDebianSymfony Open Redirect6.1 MediumsymfonyDebianSymfony Path Disclosure5.3 MediumsymfonyDebianSymfony Host Header Injection7.2 HighsymfonyDebianSymfony HTTP Foundation web cache poisoning6.5 MediumsymfonyDebianSymfony SSRF Vulnerability via Form Component6.5 MediumsymfonyDebianSymfony Directory Traversal7.5 HighsymfonyDebianSymfony CSRF Vulnerability5.9 MediumsymfonyDebian** DISPUTED ** The debug handler in Symfony before v2.7.33, 2.8.x before v2.8.26, 3.x before v3.2...6.1 MediumsymfonyDebian** DISPUTED ** Reflected Cross-site scripting (XSS) vulnerability in the web profiler in...6.1 MediumsymfonyDebianSymfony Open Redirect6.1 MediumsymfonyDebianSymfony Authentication Bypass9.8 CriticalsymfonyDebianSymfony CSRF Token Fixation8.8 HighsymfonyDebianSymfony DoS5.9 MediumsymfonyDebianSymfony Session Fixation Vulnerability8.1 HighsymfonyDebianSymfony Open Redirect6.1 MediumsymfonyDebianSymfony Authentication Bypass9.8 CriticalsymfonyDebianSymphony Denial of Service Via Overlong Usernames7.5 HighsymfonyDebianSymfony Cryptographic Vulnerability7.5 HighsymfonyDebianSymfony Vulnerable to Timing Attack7.5 HighsymfonyDebianSymfony Session Fixation Vulnerability6.8 MediumsymfonyDebianSymfony Vulnerable to PHP Eval Injection6.8 MediumsymfonyDebianSymfony Incorrect Access Control4.3 MediumsymfonyDebianUnspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows...7.5 High- Show moreLoading…