Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 8 | symfony | 2.3.21+dfsg-4+deb8u1 |
Vulnerabilities 1
-
Medium —CVE-2015-4050 Scanner template
Symfony Incorrect Access Control
FragmentListener in the HttpKernel component in Symfony 2.3.19 through 2.3.28, 2.4.9 through 2.4.10, 2.5.4 through 2.5.11, and 2.6.0 through 2.6.7, when ESI or SSI support enabled, does not check if the _controller attribute is set, which allows remote attack…