Executive brief
Symfony potential Cross-site Scripting in WebhookController
Affected products
- Packagist symfony/symfony
- Packagist symfony/webhook
Junglewise Threat Intelligence
CVE-2023-46735: Symfony potential Cross-site Scripting in WebhookController
CVE-2023-46735 · Severity: low · CVSS 3.1 · Published 2023-11-12
Technologies: symfony/symfony (Packagist). Vendors: Packagist.
Related threats
- Symfony XML Entity Expansion security vulnerability
- Symfony XML decoding attack vector through external entities
- Symfony may allow a user to switch to using another user's identity
- Symfony Allows URI Restrictions Bypass Via Double-Encoded String
- Symphony Vulnerable to PHP Code Injection via YAML Parsing