2 results · Clear filters · Feed
-
High 7.5
symfony/validator XML Entity Expansion vulnerability
Symfony 2.0.11 carried a [similar] XXE security fix, however, on review of ZF2 I also noted a vulnerability to XML Entity Expansion (XEE) attacks whereby all extensions making use of libxml2 have no defense against XEE Quadratic Blowup Attacks. The vulnerabil…
-
High 8.1
Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
php-symfony2-Validator has loss of information during serialization