Executive brief
Webcache Poisoning in symfony/http-kernel
Affected products
- Packagist symfony/http-kernel
- Packagist symfony/symfony
Junglewise Threat Intelligence
CVE-2021-41267: Webcache Poisoning in symfony/http-kernel
CVE-2021-41267 · Severity: low · CVSS 3.1 · Published 2021-11-24
Technologies: symfony/symfony (Packagist). Vendors: Packagist.
Related threats
- Symfony XML Entity Expansion security vulnerability
- Symfony XML decoding attack vector through external entities
- Symfony may allow a user to switch to using another user's identity
- Symfony potential Cross-site Scripting in WebhookController
- Symfony Allows URI Restrictions Bypass Via Double-Encoded String