Skip to content
OpenAdvisories

Vendor

FriendsOfSymfony1

2 known vulnerabilities.

Products

symfony1 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-28861

    Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder

    Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version 1.1.0 and prior to version 1.5.19, Symfony 1 has a gadget chain due to dangerous deserialization in `sfNamespacedParameterHolder` class th…

    FriendsOfSymfony1 symfony1 friendsofsymfony1/symfony1 Packagist