CVE-2012-5574
sensiolabs symfony: no CVSS score yet. EPSS 3.5% chance of exploitation in the next 30 days.
lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request.
- EPSS
- 3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sensiolabs:symfony
References
- http://lists.fedoraproject.org/pipermail/package-announce/2012-December/093698.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-December/093920.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-December/093922.html
- http://secunia.com/advisories/51372
- http://symfony.com/blog/security-release-symfony-1-4-20-released