{"action":"Upgrade symfony/symfony to 2.0.24 or later.","affected":[{"fixed":"2.0.24","introduced":"2.0.0"},{"fixed":"2.1.12","introduced":"2.1.0"},{"fixed":"2.2.5","introduced":"2.2.0"},{"fixed":"2.3.3","introduced":"2.3.0"}],"component":"symfony/symfony","cve_ids":["CVE-2013-4751"],"ecosystem":"Packagist","epss":0.01445,"exploited":false,"fixed_versions":["2.0.24","2.1.12","2.2.5","2.3.3"],"ghsa_id":"GHSA-q8j7-fjh7-25v5","id":"tcs_01M5KF742P28MQDYRCWAY12XF6","modified_at":"2024-02-16T08:12:56.683333Z","published_at":"2022-05-05T00:28:58Z","references":["https://osv.dev/vulnerability/GHSA-q8j7-fjh7-25v5","https://nvd.nist.gov/vuln/detail/CVE-2013-4751","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4751","https://exchange.xforce.ibmcloud.com/vulnerabilities/86364","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2013-4751.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/validator/CVE-2013-4751.yaml","https://github.com/symfony/validator","https://symfony.com/blog/security-releases-symfony-2-0-24-2-1-12-2-2-5-and-2-3-3-released","https://web.archive.org/web/20200228181137/http://www.securityfocus.com/bid/61709","http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114380.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114436.html","http://symfony.com/blog/security-releases-symfony-2-0-24-2-1-12-2-2-5-and-2-3-3-released"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-q8j7-fjh7-25v5#Packagist/symfony/symfony","url":"https://osv.dev/vulnerability/GHSA-q8j7-fjh7-25v5"}],"summary":"Symfony collectionCascaded and collectionCascadedDeeply fields security bypass"}