CyberSecBulletin

FriendsOfSymfony1 vulnerabilities

We track 2 vulnerabilities in FriendsOfSymfony1 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 22, 2024.

2vulnerabilities
2critical
0high
0exploited
9.4average CVSS score

Latest FriendsOfSymfony1 vulnerabilities

  • 9.8 Critical severity

    symfony1: Deserialization of Untrusted Data

    CVE-2024-28861FriendsOfSymfony1EPSS 1.55%

    Symfony 1 is a community-driven fork of the 1.x branch of Symfony, a PHP framework for web projects. Starting in version 1.1.0 and prior to version 1.5.19, Symfony 1 has a gadget chain due to dangerous deserialization in `sfNamespacedParameterHolder` class tha

  • 9.0 Critical severity

    symfony1: Deserialization of Untrusted Data

    CVE-2024-28859FriendsOfSymfony1EPSS 1.59%

    Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performance, composer compatible and PHP 8 support. Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get