Debian/symfony: high 7.1
In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, it is possible to cache objects that may contain bad user input. On serialization or unserialization, this could
Action: Upgrade symfony to 3.4.22+dfsg-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.4.22+dfsg-2 | - |
Fixed versions
| 3.4.22+dfsg-2 |
Sources
- osv: DEBIAN-CVE-2019-10912#Debian:13/symfony
- https://security-tracker.debian.org/tracker/CVE-2019-10912
published · modified · JSON