CVE-2015-4050
2 advisories.
Packagist/symfony/http-kernel CVE-2015-4050: medium, EPSS 8.21%
Symfony Incorrect Access Control
Action: Upgrade symfony/http-kernel to 2.3.29 or later.
composer require symfony/http-kernel:2.3.29composer require symfony/http-kernel:2.5.12composer require symfony/http-kernel:2.6.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3.19 | 2.3.29 | - |
| 2.5.4 | 2.5.12 | - |
| 2.6.0 | 2.6.8 | - |
| 2.4.9 | - | 2.4.10 |
Fixed versions
| 2.3.29 | 2.5.12 | 2.6.8 |
Sources
- osv: GHSA-qmqw-mpqp-mr54
- https://nvd.nist.gov/vuln/detail/CVE-2015-4050
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-kernel/CVE-2015-4050.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2015-4050.yaml
- https://symfony.com/cve-2015-4050
- https://web.archive.org/web/20200228090443/http://www.securityfocus.com/bid/74928
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159513.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159603.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159610.html
- http://symfony.com/blog/cve-2015-4050-esi-unauthorized-access
- http://www.debian.org/security/2015/dsa-3276
CVE-2015-4050 · published · modified · JSON
Packagist/symfony/symfony CVE-2015-4050: medium, EPSS 8.21%
Symfony Incorrect Access Control
Action: Upgrade symfony/symfony to 2.3.29 or later.
composer require symfony/symfony:2.3.29composer require symfony/symfony:2.5.12composer require symfony/symfony:2.6.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3.19 | 2.3.29 | - |
| 2.4.9 | - | 2.4.10 |
| 2.5.4 | 2.5.12 | - |
| 2.6.0 | 2.6.8 | - |
Fixed versions
| 2.3.29 | 2.5.12 | 2.6.8 |
Sources
- osv: GHSA-qmqw-mpqp-mr54#Packagist/symfony/symfony
- https://nvd.nist.gov/vuln/detail/CVE-2015-4050
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-kernel/CVE-2015-4050.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2015-4050.yaml
- https://symfony.com/cve-2015-4050
- https://web.archive.org/web/20200228090443/http://www.securityfocus.com/bid/74928
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159513.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159603.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159610.html
- http://symfony.com/blog/cve-2015-4050-esi-unauthorized-access
- http://www.debian.org/security/2015/dsa-3276
CVE-2015-4050 · published · modified · JSON