Skip to content
OpenAdvisories

Package · Packagist

symfony/http-foundation

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-10913

    Invalid HTTP method overrides allow possible XSS or other attacks in Symfony

    In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injectio…

    symfony/symfony symfony symfony symfony/http-foundation Debian Ubuntu Packagist