Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/symfony/form@2.7.6
purl pkg:composer/symfony/form@2.7.6
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.0
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
GHSA-g97c-jfx6-xvxh
Aliases:
CVE-2015-8125
Symfony Vulnerable to Timing Attack Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers …
2.7.7
Vulnerable
CVE-2017-16790

Attacker can read all files content on the server When a form is submitted by the user, the request handler …
2.7.38
Vulnerable
2.8.31
Vulnerable
3.2.14
Vulnerable
3.3.13
Vulnerable
GHSA-x3cf-w64x-4cp2
Aliases:
CVE-2018-19789
Symfony Path Disclosure An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before …
2.7.50
Vulnerable
2.7.50
Vulnerable
GHSA-cqqh-94r6-wjrg
Aliases:
CVE-2017-16790
Symfony SSRF Vulnerability via Form Component An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. …
2.7.38
Vulnerable
2.7.38
Vulnerable
CVE-2022-23601
Aliases:
GHSA-vvmr-8829-6whx
Cross-Site Request Forgery (CSRF) Symfony is a PHP framework for web and console applications and a set of reusable PHP … There are no reported fixed by versions.
CVE-2022-24894
Aliases:
GHSA-h7vf-5wrv-9fhv
Improper Authorization Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The …
5.4.2
Vulnerable
5.4.2
Vulnerable
This package is not known to fix any advisories.