{"action":"Upgrade symfony/symfony to 2.0.24 or later.","affected":[{"fixed":"2.0.24","introduced":"2.0.0"},{"fixed":"2.1.12","introduced":"2.1.0"},{"fixed":"2.2.5","introduced":"2.2.0"},{"fixed":"2.3.3","introduced":"2.3.0"}],"component":"symfony/symfony","cve_ids":["CVE-2013-4752"],"ecosystem":"Packagist","epss":0.02313,"exploited":false,"fixed_versions":["2.0.24","2.1.12","2.2.5","2.3.3"],"ghsa_id":"GHSA-22pv-7v9j-hqxp","id":"tcs_01M5KEREGDZE5E8GCC7F6F75QP","modified_at":"2024-03-16T05:20:10.388764Z","published_at":"2022-05-05T00:29:17Z","references":["https://osv.dev/vulnerability/GHSA-22pv-7v9j-hqxp","https://nvd.nist.gov/vuln/detail/CVE-2013-4752","https://web.archive.org/web/20130901060826/http://www.securityfocus.com/bid/61715","https://symfony.com/blog/security-releases-symfony-2-0-24-2-1-12-2-2-5-and-2-3-3-released","https://github.com/symfony/symfony","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2013-4752.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2013-4752.yaml","https://exchange.xforce.ibmcloud.com/vulnerabilities/86374","https://exchange.xforce.ibmcloud.com/vulnerabilities/86373","https://exchange.xforce.ibmcloud.com/vulnerabilities/86372","https://exchange.xforce.ibmcloud.com/vulnerabilities/86371","https://exchange.xforce.ibmcloud.com/vulnerabilities/86370","https://exchange.xforce.ibmcloud.com/vulnerabilities/86369","https://exchange.xforce.ibmcloud.com/vulnerabilities/86368","https://exchange.xforce.ibmcloud.com/vulnerabilities/86367","https://exchange.xforce.ibmcloud.com/vulnerabilities/86366","https://exchange.xforce.ibmcloud.com/vulnerabilities/86365","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4752","http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114450.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114461.html","http://symfony.com/blog/security-releases-symfony-2-0-24-2-1-12-2-2-5-and-2-3-3-released"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-22pv-7v9j-hqxp","url":"https://osv.dev/vulnerability/GHSA-22pv-7v9j-hqxp"}],"summary":"Symfony Host Header Injection vulnerability in the HttpFoundation component"}