Search for packages
| purl | pkg:composer/symfony/form@3.2.6 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2021-21424
Aliases: GHSA-5pv8-ppvj-4h68 |
Information Exposure Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The … |
Vulnerable Vulnerable |
|
CVE-2018-19789
|
Unrestricted Upload of File with Dangerous Type When using the scalar type hint `string` in a setter method (e.g. `setName(string … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2017-16790
|
Attacker can read all files content on the server When a form is submitted by the user, the request handler … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-x3cf-w64x-4cp2
Aliases: CVE-2018-19789 |
Symfony Path Disclosure An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before … |
Vulnerable Vulnerable |
|
GHSA-cqqh-94r6-wjrg
Aliases: CVE-2017-16790 |
Symfony SSRF Vulnerability via Form Component An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. … |
Vulnerable Vulnerable |
|
CVE-2022-23601
Aliases: GHSA-vvmr-8829-6whx |
Cross-Site Request Forgery (CSRF) Symfony is a PHP framework for web and console applications and a set of reusable PHP … | There are no reported fixed by versions. |
|
CVE-2022-24894
Aliases: GHSA-h7vf-5wrv-9fhv |
Improper Authorization Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The … |
Vulnerable Vulnerable |