Skip to content
OpenAdvisories

Package · Packagist

symfony/http-foundation

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.1
    CVE-2024-50345

    Open redirect via browser-sanitized URLs in symfony/http-foundation

    symfony/http-foundation is a module for the Symphony PHP framework which defines an object-oriented layer for the HTTP specification. The `Request` class, does not parse URI with special characters the same way browsers do. As a result, an attacker can trick …

    symfony symfony symfony symfony Debian Ubuntu Packagist
  • Low 2.6
    CVE-2020-5255

    Prevent cache poisoning via a Response Content-Type header

    In Symfony before versions 4.4.7 and 5.0.7, when a `Response` does not contain a `Content-Type` header, affected versions of Symfony can fallback to the format defined in the `Accept` header of the request, leading to a possible mismatch between the response&…

    symfony symfony symfony/symfony symfony Debian Packagist