CVE-2014-4931
2 advisories.
Packagist/symfony/framework-bundle CVE-2014-4931: high 7.5
Code injection in the way Symfony implements translation caching in FrameworkBundle
Action: Upgrade symfony/framework-bundle to 2.3.18 or later.
composer require symfony/framework-bundle:2.3.18composer require symfony/framework-bundle:2.4.8composer require symfony/framework-bundle:2.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.3.18 | - |
| 2.4.0 | 2.4.8 | - |
| 2.5.0 | 2.5.2 | - |
Fixed versions
| 2.3.18 | 2.4.8 | 2.5.2 |
Sources
- osv: GHSA-wfv7-5x33-v22h
- https://github.com/symfony/symfony/commit/06a80fbdbe744ad6f3010479ba64ef5cf35dd9af.patch
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/framework-bundle/CVE-2014-4931.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2014-4931.yaml
- https://symfony.com/blog/security-releases-cve-2014-4931-symfony-2-3-18-2-4-8-and-2-5-2-released
CVE-2014-4931 · published · modified · JSON
Packagist/symfony/symfony CVE-2014-4931: high 7.5
Code injection in the way Symfony implements translation caching in FrameworkBundle
Action: Upgrade symfony/symfony to 2.3.19 or later.
composer require symfony/symfony:2.3.19composer require symfony/symfony:2.4.9composer require symfony/symfony:2.5.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.3.19 | - |
| 2.4.0 | 2.4.9 | - |
| 2.5.0 | 2.5.4 | - |
Fixed versions
| 2.3.19 | 2.4.9 | 2.5.4 |
Sources
- osv: GHSA-wfv7-5x33-v22h#Packagist/symfony/symfony
- https://github.com/symfony/symfony/commit/06a80fbdbe744ad6f3010479ba64ef5cf35dd9af.patch
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/framework-bundle/CVE-2014-4931.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2014-4931.yaml
- https://symfony.com/blog/security-releases-cve-2014-4931-symfony-2-3-18-2-4-8-and-2-5-2-released
CVE-2014-4931 · published · modified · JSON