cve.bz

sensiolabs symfony vulnerabilities in 2021, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 6.5CVE-2021-41270EPSS 1.4%

    Symfony/Serializer handles serializing and deserializing data structures for Symfony, a PHP framework for web and console applications and a set of reusable PHP components. Symfony versions 4.1.0 before 4.4.35 and versions 5.0.0 before 5.3…

  2. 8.8CVE-2021-41268EPSS 1.3%

    Symfony/SecurityBundle is the security system for Symfony, a PHP framework for web and console applications and a set of reusable PHP components. Since the rework of the Remember me cookie in version 5.3.0, the cookie is not invalidated wh…

  3. 6.5CVE-2021-41267EPSS 1.3%

    Symfony/Http-Kernel is the HTTP kernel component for Symfony, a PHP framework for web and console applications and a set of reusable PHP components. Headers that are not part of the "trusted_headers" allowed list are ignored and protect us…

  4. 8.8CVE-2021-32693EPSS 1.4%

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. A vulnerability related to firewall authentication is in Symfony starting with version 5.3.0 and prior to 5.3.2. When an application defines …

  5. 5.3CVE-2021-21424EPSS 1.6%

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant permissions due to different handling depending on whether the user existed or n…