PatchFirst · Свежие уязвимости
За последние 30 дней в symfony/symfony опубликовано уязвимостей: 2; в каталоге KEV: 0.
Уязвимостей: 102
Symfony 2.0.x before 2.0.20, 2.1.x before 2.1.5, and 2.2-dev, when the internal routes configuration is enabled, allows remote attackers to access arbitrary services via vectors involving a URI beginning with a /_internal substring.
Symfony 2.0.x before 2.0.20 does not process URL encoded data consistently within the Routing and Security components, which allows remote attackers to bypass intended URI restrictions via a doubly encoded string.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.