Skip to content
OpenAdvisories

Package · Packagist

symfony/framework-bundle

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2014-4931

    Code injection in the way Symfony implements translation caching in FrameworkBundle

    When investigating issue [#11093](https://github.com/symfony/symfony/issues/11093), [Jeremy Derussé](https://connect.sensiolabs.com/profile/jderusse) found a serious code injection issue in the way Symfony implements translation caching in FrameworkBundle. - …

    symfony/symfony symfony/framework-bundle Packagist
  • High 8.1
    CVE-2022-23601

    CSRF token missing in Symfony

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The Symfony form component provides a CSRF protection mechanism by using a random token injected in the form and using the session to store and control the token…

    symfony symfony symfony/framework-bundle Packagist