Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/friendsofsymfony1/symfony1@1.5.19
Typecomposer
Namespacefriendsofsymfony1
Namesymfony1
Version1.5.19
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-xpz8-ejf2-yye9
vulnerability_id VCID-xpz8-ejf2-yye9
summary Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version 1.1.0 and prior to version 1.5.19, Symfony 1 has a gadget chain due to dangerous deserialization in `sfNamespacedParameterHolder` class that would enable an attacker to get remote code execution if a developer deserializes user input in their project. Version 1.5.19 contains a patch for the issue.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-28861
reference_id
reference_type
scores
0
value 0.07306
scoring_system epss
scoring_elements 0.91863
published_at 2026-06-11T12:55:00Z
1
value 0.07306
scoring_system epss
scoring_elements 0.91891
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-28861
1
reference_url https://github.com/FriendsOfSymfony1/symfony1
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfSymfony1/symfony1
2
reference_url https://github.com/FriendsOfSymfony1/symfony1/commit/0bd9d59c69221f49bfc8be8b871b79e12d7d171a
reference_id 0bd9d59c69221f49bfc8be8b871b79e12d7d171a
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-03-25T19:21:39Z/
url https://github.com/FriendsOfSymfony1/symfony1/commit/0bd9d59c69221f49bfc8be8b871b79e12d7d171a
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-28861
reference_id CVE-2024-28861
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2024-28861
4
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/friendsofsymfony1/symfony1/CVE-2024-28861.yaml
reference_id CVE-2024-28861.YAML
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/friendsofsymfony1/symfony1/CVE-2024-28861.yaml
5
reference_url https://github.com/advisories/GHSA-pv9j-c53q-h433
reference_id GHSA-pv9j-c53q-h433
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pv9j-c53q-h433
6
reference_url https://github.com/FriendsOfSymfony1/symfony1/security/advisories/GHSA-pv9j-c53q-h433
reference_id GHSA-pv9j-c53q-h433
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-03-25T19:21:39Z/
url https://github.com/FriendsOfSymfony1/symfony1/security/advisories/GHSA-pv9j-c53q-h433
fixed_packages
0
url pkg:composer/friendsofsymfony1/symfony1@1.5.19
purl pkg:composer/friendsofsymfony1/symfony1@1.5.19
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/friendsofsymfony1/symfony1@1.5.19
aliases CVE-2024-28861, GHSA-pv9j-c53q-h433
risk_score 4.4
exploitability 0.5
weighted_severity 8.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xpz8-ejf2-yye9
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/friendsofsymfony1/symfony1@1.5.19