{"action":"Upgrade symfony/symfony to 2.7.38 or later.","affected":[{"fixed":"2.7.38","introduced":"2.7.0"},{"fixed":"2.8.31","introduced":"2.8.0"},{"fixed":"3.2.14","introduced":"3.2.0"},{"fixed":"3.3.13","introduced":"3.3.0"}],"component":"symfony/symfony","cve_ids":["CVE-2017-16652"],"ecosystem":"Packagist","epss":0.0077,"exploited":false,"fixed_versions":["2.7.38","2.8.31","3.2.14","3.3.13"],"ghsa_id":"GHSA-r7p7-qr7p-2rrf","id":"tcs_01M5KF8185HY62AC52DGFEAAGH","modified_at":"2024-02-16T08:16:24.148792Z","published_at":"2022-05-14T01:21:36Z","references":["https://osv.dev/vulnerability/GHSA-r7p7-qr7p-2rrf","https://nvd.nist.gov/vuln/detail/CVE-2017-16652","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-http/CVE-2017-16652.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2017-16652.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2017-16652.yaml","https://github.com/symfony/symfony","https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html","https://symfony.com/blog/cve-2017-16652-open-redirect-vulnerability-on-security-handlers","https://symfony.com/cve-2017-16652"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-r7p7-qr7p-2rrf","url":"https://osv.dev/vulnerability/GHSA-r7p7-qr7p-2rrf"}],"summary":"Symfony Open Redirect"}