{"action":"Upgrade symfony/symfony to 2.3.19 or later.","affected":[{"fixed":"2.3.19","introduced":"2.0.0"},{"fixed":"2.4.9","introduced":"2.4.0"},{"fixed":"2.5.4","introduced":"2.5.0"}],"component":"symfony/symfony","cve_ids":["CVE-2014-5245"],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.3.19","2.4.9","2.5.4"],"ghsa_id":"GHSA-wvjv-p5rr-mmqm","id":"tcs_01M5KFACWWD64RXMGG76C8X3RX","modified_at":"2024-05-30T04:26:51.101526Z","published_at":"2024-05-30T00:46:52Z","references":["https://osv.dev/vulnerability/GHSA-wvjv-p5rr-mmqm","https://github.com/symfony/symfony/pull/11831","https://github.com/symfony/symfony/commit/654b1f281e09dd96ffbbd3da815411700423ecf5","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-kernel/CVE-2014-5245.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2014-5245.yaml","https://symfony.com/cve-2014-5245"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wvjv-p5rr-mmqm#Packagist/symfony/symfony","url":"https://osv.dev/vulnerability/GHSA-wvjv-p5rr-mmqm"}],"summary":"Symfony allows direct access of ESI URLs behind a trusted proxy"}