Symfony Dependency-Injection vulnerabilities

1 known vulnerability affecting symfony/dependency-injection.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2019-10910CRITICAL≥ 2.7.0, < 2.7.51≥ 2.8.0, < 2.8.50+3 more2019-11-18

CVE-2019-10910 [CRITICAL] CWE-89 Symfony Service IDs Allow Injection Symfony Service IDs Allow Injection In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection.