Packagist/symfony/security CVE-2012-6431: medium, EPSS 1.88%

Symfony Allows URI Restrictions Bypass Via Double-Encoded String

Action: Upgrade symfony/security to 2.0.19 or later.

composer require symfony/security:2.0.19

Affected

Fixed versions

Sources

• osv: GHSA-83c3-qx27-2rwr#Packagist/symfony/security
• https://nvd.nist.gov/vuln/detail/CVE-2012-6431
• https://github.com/symfony/symfony/commit/55014a6841bec50046e8329a4835c160ac31a496
• https://github.com/symfony/symfony/commit/8b2c17f80377582287a78e0b521497e039dd6b0d
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2012-6431.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/routing/CVE-2012-6431.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2012-6431.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2012-6431.yaml
• https://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released
• http://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released

CVE-2012-6431 · published 2022-05-17T05:17:03Z · modified 2024-12-03T06:08:10.253084Z · JSON