{"action":"Upgrade symfony/web-profiler-bundle to 2.3.19 or later.","affected":[{"fixed":"2.3.19","introduced":"2.0.0"},{"fixed":"2.4.9","introduced":"2.4.0"},{"fixed":"2.5.4","introduced":"2.5.0"}],"component":"symfony/web-profiler-bundle","cve_ids":["CVE-2014-6072"],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.3.19","2.4.9","2.5.4"],"ghsa_id":"GHSA-v35g-4rrw-h4fw","id":"tcs_01M5KF8QCJB0B1XGJ0WB15ZZG3","modified_at":"2024-05-30T13:41:54.836306Z","published_at":"2024-05-30T13:00:01Z","references":["https://osv.dev/vulnerability/GHSA-v35g-4rrw-h4fw","https://github.com/symfony/symfony/pull/11832","https://github.com/symfony/symfony/commit/f38536ab79058f6a934426c41170256ba9623a02","https://github.com/symfony/web-profiler-bundle/commit/5b589ba83faf7eb20cec50725cd657075aebdd36","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2014-6072.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/web-profiler-bundle/CVE-2014-6072.yaml","https://symfony.com/cve-2014-6072"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-v35g-4rrw-h4fw#Packagist/symfony/web-profiler-bundle","url":"https://osv.dev/vulnerability/GHSA-v35g-4rrw-h4fw"}],"summary":"Symfony Cross-Site Request Forgery vulnerability in the Web Profiler"}