Lucene search
Veracode Vulnerability DatabaseVERACODE:8048HistoryDec 19, 2018 - 6:03 a.m.
Information Disclosure
2018-12-1906:03:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.011 Low
EPSS
Percentile
84.4%
symfony is vulnerable to information disclosure. Calling the UploadedFile::__toString() function discloses the path of the uploaded file, which can escalate to a remote code execution when used with a local file inclusion.
| CPE | Name | Operator | Version |
|---|---|---|---|
| symfony/symfony | eq | 4.2.0 | |
| symfony/symfony | le | 4.1.8 | |
| symfony/symfony | le | 4.0.14 | |
| symfony/symfony | le | 2.7.49 | |
| symfony/symfony | le | 3.4.19 | |
| symfony/symfony | le | 2.8.48 |
Related
osv
osv
Symfony Path Disclosure
2022-05-14 01:04:20
CVE-2018-19789
2018-12-18 22:29:04
symfony - security update
2019-03-09 00:00:00
symfony
symfony
CVE-2018-19789: Disclosure of uploaded files full path
2018-12-06 00:00:00
cve
cve
CVE-2018-19789
2018-12-18 22:29:04
debiancve
debiancve
CVE-2018-19789
2018-12-18 22:29:04
ubuntucve
ubuntucve
CVE-2018-19789
2018-12-18 00:00:00
friendsofphp
friendsofphp
CVE-2018-19789: Temporary uploaded file path disclosure
2018-11-06 11:52:00
CVE-2018-19789: Temporary uploaded file path disclosure
2018-11-06 11:52:00
cvelist
cvelist
CVE-2018-19789
2018-12-18 22:00:00
nvd
nvd
CVE-2018-19789
2018-12-18 22:29:04
github
github
Symfony Path Disclosure
2022-05-14 01:04:20
prion
prion
Remote code execution
2018-12-18 22:29:00
nessus
nessus
Fedora 28 : php-symfony3 (2018-66547a8c14)
2019-01-03 00:00:00
Fedora 28 : php-symfony4 (2018-6edf04d9d6)
2019-01-03 00:00:00
Fedora 29 : php-symfony4 (2018-84a1f77d89)
2019-01-03 00:00:00
openvas
openvas
Fedora Update for php-symfony3 FEDORA-2018-8d3a9bdff1
2019-05-07 00:00:00
Fedora Update for php-symfony FEDORA-2018-b38a4dd0c7
2019-05-07 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: php-symfony-2.8.49-1.fc29
2018-12-17 19:12:55
[SECURITY] Fedora 29 Update: php-symfony4-4.1.9-1.fc29
2018-12-17 19:12:56
[SECURITY] Fedora 29 Update: php-symfony3-3.4.20-1.fc29
2018-12-17 19:12:54
debian
debian
[SECURITY] [DLA 1707-1] symfony security update
2019-03-10 01:19:23
[SECURITY] [DSA 4441-1] symfony security update
2019-05-10 06:26:19
[SECURITY] [DSA 4441-1] symfony security update
2019-05-10 06:26:19