CVE-2023-46734
2 advisories.
Packagist/symfony/twig-bridge CVE-2023-46734: medium 6.1
Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters
Action: Upgrade symfony/twig-bridge to 4.4.51 or later.
composer require symfony/twig-bridge:4.4.51composer require symfony/twig-bridge:5.4.31composer require symfony/twig-bridge:6.3.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 4.4.51 | - |
| 5.0.0 | 5.4.31 | - |
| 6.0.0 | 6.3.8 | - |
Fixed versions
| 4.4.51 | 5.4.31 | 6.3.8 |
Sources
- osv: GHSA-q847-2q57-wmr3
- https://github.com/symfony/symfony/security/advisories/GHSA-q847-2q57-wmr3
- https://nvd.nist.gov/vuln/detail/CVE-2023-46734
- https://github.com/symfony/symfony/commit/5d095d5feb1322b16450284a04d6bb48d1198f54
- https://github.com/symfony/symfony/commit/9da9a145ce57e4585031ad4bee37c497353eec7c
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2023-46734.yaml
- https://github.com/symfony/symfony
- https://lists.debian.org/debian-lts-announce/2023/11/msg00019.html
- https://symfony.com/cve-2023-46734
CVE-2023-46734 · published · modified · JSON
Packagist/symfony/symfony CVE-2023-46734: medium 6.1
Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters
Action: Upgrade symfony/symfony to 4.4.51 or later.
composer require symfony/symfony:4.4.51composer require symfony/symfony:5.4.31composer require symfony/symfony:6.3.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 4.4.51 | - |
| 5.0.0 | 5.4.31 | - |
| 6.0.0 | 6.3.8 | - |
Fixed versions
| 4.4.51 | 5.4.31 | 6.3.8 |
Sources
- osv: GHSA-q847-2q57-wmr3#Packagist/symfony/symfony
- https://github.com/symfony/symfony/security/advisories/GHSA-q847-2q57-wmr3
- https://nvd.nist.gov/vuln/detail/CVE-2023-46734
- https://github.com/symfony/symfony/commit/5d095d5feb1322b16450284a04d6bb48d1198f54
- https://github.com/symfony/symfony/commit/9da9a145ce57e4585031ad4bee37c497353eec7c
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2023-46734.yaml
- https://github.com/symfony/symfony
- https://lists.debian.org/debian-lts-announce/2023/11/msg00019.html
- https://symfony.com/cve-2023-46734
CVE-2023-46734 · published · modified · JSON