Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-89cp-fvcc-hxh7
Advisory ID github_osv/GHSA-89cp-fvcc-hxh7
Aliases CVE-2012-6432
Summary Symfony Access Control Vulnerability Symfony 2.0.x before 2.0.20, 2.1.x before 2.1.5, and 2.2-dev, when the internal routes configuration is enabled, allows remote attackers to access arbitrary services via vectors involving a URI beginning with a `/_internal` substring.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-284 Improper Access Control
System Score Found at
generic_textual MODERATE
Reference id Reference type URL
https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2012-6432.yaml
https://github.com/symfony/symfony
https://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released
http://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released
CVE-2012-6432 https://nvd.nist.gov/vuln/detail/CVE-2012-6432
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.