Beveiligingsadvies

CVE-2019-10913

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-05-16 21:15:04

Laatst bijgewerkt 2024-08-04 22:40:15

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, HTTP Methods provided as verbs or using the override header may be treated as trusted input, but they are not validated, possibly causing SQL injection or XSS. This is related to symfony/http-foundation.

← Alle CVE's bekijken Bekijk op cve.org ↗