Known vulnerabilities in http-kernel

Vendor: Symfony
Software: http-kernel
Software CPE: cpe:2.3:a:symfony:http-kernel:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting http-kernel http-kernel is affected by 2 known vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71735 - Session Fixation
CVE-2022-24894
CWE-384 Medium
No
No
4.4.50, 5.4.20, 6.0.20, 6.1.12, 6.2.6 01.02.2023 SB2023020137
SB2023020144
SB20230816143
and 2 more
#VU58370 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-41267
CWE-444 Medium
No
No
5.3.12 25.11.2021 SB2021112508
SB2021112510
SB2021112429