CVE-2015-2308
2 advisories.
Packagist/symfony/symfony CVE-2015-2308: medium
Symfony Vulnerable to PHP Eval Injection
Action: Upgrade symfony/symfony to 2.3.27 or later.
composer require symfony/symfony:2.3.27composer require symfony/symfony:2.5.11composer require symfony/symfony:2.6.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.3.27 | - |
| 2.4.0 | 2.5.11 | - |
| 2.6.0 | 2.6.6 | - |
Fixed versions
| 2.3.27 | 2.5.11 | 2.6.6 |
Sources
- osv: GHSA-5c58-w9xc-qcj9
- https://nvd.nist.gov/vuln/detail/CVE-2015-2308
- https://github.com/symfony/symfony/pull/14167/commits/195c57e1f50765aff33137689b16e126a689056a
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-kernel/CVE-2015-2308.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2015-2308.yaml
- https://github.com/symfony/symfony
- https://symfony.com/blog/cve-2015-2308-esi-code-injection
- https://symfony.com/cve-2015-2308
- https://web.archive.org/web/20200228084751/http://www.securityfocus.com/bid/75357
- http://jvn.jp/en/jp/JVN19578958/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000089
CVE-2015-2308 · published · modified · JSON
Packagist/symfony/http-kernel CVE-2015-2308: medium
Symfony Vulnerable to PHP Eval Injection
Action: Upgrade symfony/http-kernel to 2.3.27 or later.
composer require symfony/http-kernel:2.3.27composer require symfony/http-kernel:2.5.11composer require symfony/http-kernel:2.6.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.3.27 | - |
| 2.4.0 | 2.5.11 | - |
| 2.6.0 | 2.6.6 | - |
Fixed versions
| 2.3.27 | 2.5.11 | 2.6.6 |
Sources
- osv: GHSA-5c58-w9xc-qcj9#Packagist/symfony/http-kernel
- https://nvd.nist.gov/vuln/detail/CVE-2015-2308
- https://github.com/symfony/symfony/pull/14167/commits/195c57e1f50765aff33137689b16e126a689056a
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-kernel/CVE-2015-2308.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2015-2308.yaml
- https://github.com/symfony/symfony
- https://symfony.com/blog/cve-2015-2308-esi-code-injection
- https://symfony.com/cve-2015-2308
- https://web.archive.org/web/20200228084751/http://www.securityfocus.com/bid/75357
- http://jvn.jp/en/jp/JVN19578958/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000089
CVE-2015-2308 · published · modified · JSON