Skip to content
OpenAdvisories
High · 8.1 CVE-2013-4751 EUVD-2022-4922GHSA-q8j7-fjh7-25v5

Symfony collectionCascaded and collectionCascadedDeeply fields security bypass

Published Nov 1, 2019 · Updated Aug 6, 2024 · Assigned by mitre

Description

php-symfony2-Validator has loss of information during serialization

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist symfony/symfony >= 2.0.0, < 2.0.24 2.0.24 GHSA-q8j7-fjh7-25v5
Packagist symfony/symfony >= 2.1.0, < 2.1.12 2.1.12 GHSA-q8j7-fjh7-25v5
Packagist symfony/symfony >= 2.2.0, < 2.2.5 2.2.5 GHSA-q8j7-fjh7-25v5
Packagist symfony/symfony >= 2.3.0, < 2.3.3 2.3.3 GHSA-q8j7-fjh7-25v5
Packagist symfony/validator >= 2.0.0, < 2.0.24 2.0.24 GHSA-q8j7-fjh7-25v5
Packagist symfony/validator >= 2.1.0, < 2.1.12 2.1.12 GHSA-q8j7-fjh7-25v5
Packagist symfony/validator >= 2.2.0, < 2.2.5 2.2.5 GHSA-q8j7-fjh7-25v5
Packagist symfony/validator >= 2.3.0, < 2.3.3 2.3.3 GHSA-q8j7-fjh7-25v5

References