Added |
CPE Configuration |
|
OR
*cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:* versions from (including) 2.7.0 up to (excluding) 2.7.48
*cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:* versions from (including) 2.8.0 up to (excluding) 2.8.41
*cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:* versions from (including) 3.3.0 up to (excluding) 3.3.17
*cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:* versions from (including) 3.4.0 up to (excluding) 3.4.11
*cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:* versions from (including) 4.0.0 up to (excluding) 4.0.11
|
Added |
CVSS V2 |
|
(AV:N/AC:M/Au:N/C:P/I:P/A:N)
|
Added |
CVSS V2 Metadata |
|
Victim must voluntarily interact with attack mechanism
|
Added |
CVSS V3 |
|
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
|
Added |
CWE |
|
CWE-601
|
Changed |
Reference Type |
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G4XNBMFW33H47O5TZGA7JYCVLDBCXAJV/ No Types Assigned
|
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G4XNBMFW33H47O5TZGA7JYCVLDBCXAJV/ Third Party Advisory
|
Changed |
Reference Type |
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UBQK7JDXIELADIPGZIOUCZKMAJM5LSBW/ No Types Assigned
|
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UBQK7JDXIELADIPGZIOUCZKMAJM5LSBW/ Third Party Advisory
|
Changed |
Reference Type |
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WU5N2TZFNGXDGMXMPP7LZCWTFLENF6WH/ No Types Assigned
|
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WU5N2TZFNGXDGMXMPP7LZCWTFLENF6WH/ Third Party Advisory
|
Changed |
Reference Type |
https://symfony.com/blog/cve-2018-11408-open-redirect-vulnerability-on-security-handlers No Types Assigned
|
https://symfony.com/blog/cve-2018-11408-open-redirect-vulnerability-on-security-handlers Vendor Advisory
|