Known vulnerabilities in Symfony - page 3

Vendor: SensioLabs
Software: Symfony
Software CPE: cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*
Total vulnerabilities: 88
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Symfony Symfony is affected by 88 known vulnerabilities: 14 high, 51 medium, 23 low Critical High Medium Low

Vulnerabilities (88)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82996 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-46734
CWE-79 Low
No
No
4.4.51, 5.4.31 13.11.2023 SB2023111302
SB2025021846
#VU71736 - Cross-Site Request Forgery (CSRF)
CVE-2022-24895
CWE-352 Low
No
No
4.4.50, 5.4.20, 6.0.20, 6.1.12, 6.2.6 01.02.2023 SB2023020138
SB2023020144
SB20230816143
and 2 more
#VU71735 - Session Fixation
CVE-2022-24894
CWE-384 Medium
No
No
4.4.50, 5.4.20, 6.0.20, 6.1.12, 6.2.6 01.02.2023 SB2023020137
SB2023020144
SB20230816143
and 2 more
#VU60184 - Cross-Site Request Forgery (CSRF)
CVE-2022-23601
CWE-352 Medium
No
No
5.3.15, 5.4.4, 6.0.4 31.01.2022 SB2022013109
#VU58371 - Improper Neutralization of Formula Elements in a CSV File
CVE-2021-41270
CWE-1236 Medium
No
No
4.4.35 25.11.2021 SB2021112507
SB2021112511
SB2021112427
and 1 more
#VU58370 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-41267
CWE-444 Medium
No
No
5.3.12 25.11.2021 SB2021112508
SB2021112510
SB2021112429
#VU58369 - Session Fixation
CVE-2021-41268
CWE-384 Medium
No
No
5.3.12 25.11.2021 SB2021112509
SB2021112510
#VU54208 - Improper Authentication
CVE-2021-32693
CWE-287 High
No
No
5.3.2 17.06.2021 SB2021061719
#VU53200 - Observable Response Discrepancy
CVE-2021-21424
CWE-204 Low
No
No
3.4.48, 4.4.23, 5.2.8 12.05.2021 SB2021051228
SB2021051730
SB2021051731
and 8 more
#VU46667 - Improper input validation
CVE-2020-15094
CWE-20 High
No
No
4.4.13, 5.1.5 02.09.2020 SB2020090232
SB2020090233
SB2020090240
#VU26531 - Information Exposure Through an Error Message
CVE-2020-5274
CWE-209 Low
No
No
4.4.4, 5.0.4 02.04.2020 SB2020040207
#VU26479 - Permissions, Privileges, and Access Controls
CVE-2020-5275
CWE-264 Medium
No
No
4.4.7, 5.0.7 31.03.2020 SB2020033115
SB2020033141
#VU26478 - Improper input validation
CVE-2020-5255
CWE-20 Medium
No
No
4.4.7, 5.0.7 31.03.2020 SB2020033115
SB2020033141
#VU23181 - Permissions, Privileges, and Access Controls
CWE-264 Medium
No
No
3.4.36, 4.3.9, 4.4.1, 5.0.1 02.12.2019 SB2019120208
#VU22930 - Improper Control of Interaction Frequency
CVE-2019-18886
CWE-799 Low
No
No
4.2.12, 4.3.8 22.11.2019 SB2019111915
#VU22929 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-11325
CWE-94 High
No
No
4.2.12, 4.3.8 22.11.2019 SB2019111915
#VU22853 - Deserialization of Untrusted Data
CVE-2019-18889
CWE-502 High
No
No
2.8.52, 3.4.35, 4.2.12, 4.3.8 19.11.2019 SB2019111915
SB2019111916
SB2019111394
#VU22852 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-18888
CWE-78 Medium
No
No
2.8.52, 3.4.35, 4.2.12, 4.3.8 19.11.2019 SB2019111915
SB2019111916
SB2019111392
and 2 more
#VU22851 - Incorrect Comparison
CVE-2019-18887
CWE-697 Medium
No
No
2.8.52, 3.4.35, 4.2.12, 4.3.8 19.11.2019 SB2019111915
SB2019111916
SB2019111392
and 2 more
#VU30718 - Improper input validation
CVE-2013-4751
CWE-20 High
No
No
2.3.3 01.11.2019 SB2019110114
SB2013081003


Showing elements 41 - 60 out of 88