Published: 16/05/2019 Updated: 24/08/2020

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

In Symfony prior to 2.7.51, 2.8.x prior to 2.8.50, 3.x prior to 3.4.26, 4.x prior to 4.1.12, and 4.2.x prior to 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to symfony/http-foundation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sensiolabs symfony

Multiple vulnerabilities were discovered in the Symfony PHP framework which could lead to cache bypass, authentication bypass, information disclosure, open redirect, cross-site request forgery, deletion of arbitrary files, or arbitrary code execution For the stable distribution (stretch), these problems have been fixed in version 287+dfsg-13+de ...

Przykładowy sklep

Example Store Bundle (Based on Symfony 32 Framework) NOT MAINTAINED Why? We are currently in 2017 Several hundred thousand platforms are available on the e-commerce market Why, then, I am building next one? Because the author of this code is hungry for knowledge and the next challenges :-) And he wants to test his skills by doing something cool Warning: This code is REA

Point of Sale, Laravel Framework!

Laravel Sales of Point Framework Laravel with Infyom Laravel Generator (custom login), Minimal PHP 71 > requirement PHP 7232 How to use: Download repository and extracted or clone the repository $ git clone githubcom/fredriclesomar/EPoSgit Running composer $ cd EPoS $ composer install

CWE-79 CWE-89 https://symfony.com/blog/cve-2019-10913-reject-invalid-http-method-overrides https://github.com/symfony/symfony/commit/944e60f083c3bffbc6a0b5112db127a10a66a8ec https://nvd.nist.gov https://www.debian.org/security/2019/dsa-4441 https://github.com/KerbenII/shop

CVE-2019-10913

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect