Known vulnerabilities in Symfony - page 3

Vendor: SensioLabs
Software: Symfony
Software CPE: cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*
Total vulnerabilities: 91
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Symfony Symfony is affected by 91 known vulnerabilities: 14 high, 54 medium, 23 low Critical High Medium Low

Vulnerabilities (91)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82996 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-46734
CWE-79 Low
No
No
4.4.51, 5.4.31 13.11.2023 SB2023111302
SB2025021846
#VU82995 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-46735
CWE-79 Low
No
No
6.3.8 13.11.2023 SB2023111303
#VU71736 - Cross-Site Request Forgery (CSRF)
CVE-2022-24895
CWE-352 Low
No
No
4.4.50, 5.4.20, 6.0.20, 6.1.12, 6.2.6 01.02.2023 SB2023020138
SB2023020144
SB20230816143
and 2 more
#VU71735 - Session Fixation
CVE-2022-24894
CWE-384 Medium
No
No
4.4.50, 5.4.20, 6.0.20, 6.1.12, 6.2.6 01.02.2023 SB2023020137
SB2023020144
SB20230816143
and 2 more
#VU60184 - Cross-Site Request Forgery (CSRF)
CVE-2022-23601
CWE-352 Medium
No
No
5.3.15, 5.4.4, 6.0.4 31.01.2022 SB2022013109
#VU58371 - Improper Neutralization of Formula Elements in a CSV File
CVE-2021-41270
CWE-1236 Medium
No
No
4.4.35 25.11.2021 SB2021112507
SB2021112511
SB2021112427
and 1 more
#VU58370 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-41267
CWE-444 Medium
No
No
5.3.12 25.11.2021 SB2021112508
SB2021112510
SB2021112429
#VU58369 - Session Fixation
CVE-2021-41268
CWE-384 Medium
No
No
5.3.12 25.11.2021 SB2021112509
SB2021112510
#VU54208 - Improper Authentication
CVE-2021-32693
CWE-287 High
No
No
5.3.2 17.06.2021 SB2021061719
#VU53200 - Observable Response Discrepancy
CVE-2021-21424
CWE-204 Low
No
No
3.4.48, 4.4.23, 5.2.8 12.05.2021 SB2021051228
SB2021051730
SB2021051731
and 8 more
#VU40585 - Cross-Site Request Forgery (CSRF)
CVE-2015-8125
CWE-352 Medium
No
No
- 07.12.2015 SB2015120704
SB2015112602
SB2015112603
and 1 more
#VU40709 - Improper Control of Generation of Code ('Code Injection')
CVE-2015-2308
CWE-94 Medium
No
No
- 24.06.2015 SB2015062407
SB2015040202
SB2015040203
and 1 more
#VU40728 - Improper Access Control
CVE-2015-4050
CWE-284 Medium
No
No
- 02.06.2015 SB2015060202
SB2015052713
SB2015052714
and 1 more
#VU40987 - Resource Management Errors
CVE-2013-5958
CWE-399 Medium
No
No
- 27.12.2014 SB2014122702
#VU41589 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-1348
CWE-94 Medium
No
No
- 02.06.2014 SB2014060206
#VU41590 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-1397
CWE-94 Medium
No
No
- 02.06.2014 SB2014060207
SB2013011903
#VU43226 - Permissions, Privileges, and Access Controls
CVE-2012-6431
CWE-264 Medium
No
No
- 27.12.2012 SB2012122701
#VU43227 - Permissions, Privileges, and Access Controls
CVE-2012-6432
CWE-264 Medium
No
No
- 27.12.2012 SB2012122702
#VU43247 - Permissions, Privileges, and Access Controls
CVE-2012-5574
CWE-264 Medium
No
No
- 18.12.2012 SB2012121808
SB2014051801
SB2012112601
#VU44012 - Improper input validation
CVE-2012-2667
CWE-20 Medium
No
No
- 07.06.2012 SB2012060702
SB2012060403


Showing elements 41 - 60 out of 91