Executive brief
Symphony Vulnerable to PHP Code Injection via YAML Parsing
Affected products
- Packagist symfony/yaml
- Packagist symfony/symfony
Junglewise Threat Intelligence
CVE-2013-1348: Symphony Vulnerable to PHP Code Injection via YAML Parsing
CVE-2013-1348 · Severity: info · Published 2022-05-17
Technologies: symfony/symfony (Packagist). Vendors: Packagist.
Related threats
- Symfony XML Entity Expansion security vulnerability
- Symfony XML decoding attack vector through external entities
- Symfony may allow a user to switch to using another user's identity
- Symfony potential Cross-site Scripting in WebhookController
- Symfony Allows URI Restrictions Bypass Via Double-Encoded String