FriendsOfSymfony1

Products

ProductCVEsExploitedLatest
symfony12–Mar 22, 2024

Exploited and recent CVEs

  • CVE-2024-28861 Critical 9.8 Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder 1.5%
  • CVE-2024-28859 Medium 5.0 Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency 1.6%