CVE-2024-28861
1 advisory.
Packagist/friendsofsymfony1/symfony1 CVE-2024-28861: medium, EPSS 1.55%
Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder
Action: Upgrade friendsofsymfony1/symfony1 to 1.5.19 or later.
composer require friendsofsymfony1/symfony1:1.5.19Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.0 | 1.5.19 | - |
Fixed versions
| 1.5.19 |
Sources
- osv: GHSA-pv9j-c53q-h433
- https://github.com/FriendsOfSymfony1/symfony1/security/advisories/GHSA-pv9j-c53q-h433
- https://github.com/FriendsOfPHP/security-advisories/blob/master/friendsofsymfony1/symfony1/CVE-2024-28861.yaml
- https://github.com/FriendsOfSymfony1/symfony1
CVE-2024-28861 · published · modified · JSON