Executive brief
Symfony XML Entity Expansion security vulnerability
Affected products
- Packagist symfony/symfony
Junglewise Threat Intelligence
Symfony XML Entity Expansion security vulnerability
Severity: low · CVSS 3.1 · Published 2024-05-30
Technologies: symfony/symfony (Packagist). Vendors: Packagist.
Related threats
- Symfony XML decoding attack vector through external entities
- Symfony may allow a user to switch to using another user's identity
- Symfony potential Cross-site Scripting in WebhookController
- Symfony Allows URI Restrictions Bypass Via Double-Encoded String
- Symphony Vulnerable to PHP Code Injection via YAML Parsing