Skip to content
OpenAdvisories

Package · Packagist

symfony/form

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2018-19789

    Symfony Path Disclosure

    An issue was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9, and 4.2.x before 4.2.1. When using the scalar type hint `string` in a setter method (e.g. `setName(string $name)`) of a cl…

    symfony/symfony symfony symfony symfony/form Debian Ubuntu Packagist
  • Medium 6.5
    CVE-2017-16790

    Symfony SSRF Vulnerability via Form Component

    An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. When a form is submitted by the user, the request handler classes of the Form component merge POST data and uploaded files data into one array. This big array …

    symfony/symfony symfony symfony symfony/form Debian Ubuntu Packagist