Packagist/symfony/framework-bundle CVE-2014-4931: high 7.5
Code injection in the way Symfony implements translation caching in FrameworkBundle
Action: Upgrade symfony/framework-bundle to 2.3.18 or later.
composer require symfony/framework-bundle:2.3.18composer require symfony/framework-bundle:2.4.8composer require symfony/framework-bundle:2.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.3.18 | - |
| 2.4.0 | 2.4.8 | - |
| 2.5.0 | 2.5.2 | - |
Fixed versions
| 2.3.18 | 2.4.8 | 2.5.2 |
Sources
- osv: GHSA-wfv7-5x33-v22h
- https://github.com/symfony/symfony/commit/06a80fbdbe744ad6f3010479ba64ef5cf35dd9af.patch
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/framework-bundle/CVE-2014-4931.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2014-4931.yaml
- https://symfony.com/blog/security-releases-cve-2014-4931-symfony-2-3-18-2-4-8-and-2-5-2-released
CVE-2014-4931 · published · modified · JSON