CVE-2019-10909
4 advisories.
Packagist/symfony/symfony CVE-2019-10909: medium 5.4, EPSS 1.03%
Symfony Cross-site Scripting (XSS) vulnerability
Action: Upgrade symfony/symfony to 2.7.51 or later.
composer require symfony/symfony:2.7.51composer require symfony/symfony:2.8.50composer require symfony/symfony:3.4.26composer require symfony/symfony:4.1.12composer require symfony/symfony:4.2.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.7.0 | 2.7.51 | - |
| 2.8.0 | 2.8.50 | - |
| 3.0.0 | 3.4.26 | - |
| 4.0.0 | 4.1.12 | - |
| 4.2.0 | 4.2.7 | - |
Fixed versions
| 2.7.51 | 2.8.50 | 3.4.26 | 4.1.12 | 4.2.7 |
Sources
- osv: GHSA-g996-q5r8-w7g2
- https://nvd.nist.gov/vuln/detail/CVE-2019-10909
- https://github.com/symfony/symfony/commit/ab4d05358c3d0dd1a36fc8c306829f68e3dd84e2
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2019-10909.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2019-10909.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/framework-bundle/CVE-2019-10909.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2019-10909.yaml
- https://symfony.com/blog/cve-2019-10909-escape-validation-messages-in-the-php-templating-engine
- https://symfony.com/cve-2019-10909
- https://www.drupal.org/sa-core-2019-005
- https://www.synology.com/security/advisory/Synology_SA_19_19
CVE-2019-10909 · published · modified · JSON
Packagist/symfony/framework-bundle CVE-2019-10909: medium 5.4, EPSS 1.03%
Symfony Cross-site Scripting (XSS) vulnerability
Action: Upgrade symfony/framework-bundle to 2.7.51 or later.
composer require symfony/framework-bundle:2.7.51composer require symfony/framework-bundle:2.8.50composer require symfony/framework-bundle:3.4.26composer require symfony/framework-bundle:4.1.12composer require symfony/framework-bundle:4.2.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.7.0 | 2.7.51 | - |
| 2.8.0 | 2.8.50 | - |
| 3.0.0 | 3.4.26 | - |
| 4.0.0 | 4.1.12 | - |
| 4.2.0 | 4.2.7 | - |
Fixed versions
| 2.7.51 | 2.8.50 | 3.4.26 | 4.1.12 | 4.2.7 |
Sources
- osv: GHSA-g996-q5r8-w7g2#Packagist/symfony/framework-bundle
- https://nvd.nist.gov/vuln/detail/CVE-2019-10909
- https://github.com/symfony/symfony/commit/ab4d05358c3d0dd1a36fc8c306829f68e3dd84e2
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2019-10909.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2019-10909.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/framework-bundle/CVE-2019-10909.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2019-10909.yaml
- https://symfony.com/blog/cve-2019-10909-escape-validation-messages-in-the-php-templating-engine
- https://symfony.com/cve-2019-10909
- https://www.drupal.org/sa-core-2019-005
- https://www.synology.com/security/advisory/Synology_SA_19_19
CVE-2019-10909 · published · modified · JSON
Packagist/drupal/core CVE-2019-10909: medium 5.4, EPSS 1.03%
Symfony Cross-site Scripting (XSS) vulnerability
Action: Upgrade drupal/core to 8.5.15 or later.
composer require drupal/core:8.5.15composer require drupal/core:8.6.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0 | 8.5.15 | - |
| 8.6.0 | 8.6.15 | - |
Fixed versions
| 8.5.15 | 8.6.15 |
Sources
- osv: GHSA-g996-q5r8-w7g2#Packagist/drupal/core
- https://nvd.nist.gov/vuln/detail/CVE-2019-10909
- https://github.com/symfony/symfony/commit/ab4d05358c3d0dd1a36fc8c306829f68e3dd84e2
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2019-10909.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2019-10909.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/framework-bundle/CVE-2019-10909.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2019-10909.yaml
- https://symfony.com/blog/cve-2019-10909-escape-validation-messages-in-the-php-templating-engine
- https://symfony.com/cve-2019-10909
- https://www.drupal.org/sa-core-2019-005
- https://www.synology.com/security/advisory/Synology_SA_19_19
CVE-2019-10909 · published · modified · JSON
Packagist/drupal/drupal CVE-2019-10909: medium 5.4, EPSS 1.03%
Symfony Cross-site Scripting (XSS) vulnerability
Action: Upgrade drupal/drupal to 8.5.15 or later.
composer require drupal/drupal:8.5.15composer require drupal/drupal:8.6.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0 | 8.5.15 | - |
| 8.6.0 | 8.6.15 | - |
Fixed versions
| 8.5.15 | 8.6.15 |
Sources
- osv: GHSA-g996-q5r8-w7g2#Packagist/drupal/drupal
- https://nvd.nist.gov/vuln/detail/CVE-2019-10909
- https://github.com/symfony/symfony/commit/ab4d05358c3d0dd1a36fc8c306829f68e3dd84e2
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2019-10909.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2019-10909.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/framework-bundle/CVE-2019-10909.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2019-10909.yaml
- https://symfony.com/blog/cve-2019-10909-escape-validation-messages-in-the-php-templating-engine
- https://symfony.com/cve-2019-10909
- https://www.drupal.org/sa-core-2019-005
- https://www.synology.com/security/advisory/Synology_SA_19_19
CVE-2019-10909 · published · modified · JSON