Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-10910
9.8
CRITICALCVSS v3
Published
May 16, 2019
CVSS v2
7.5 HIGH
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection.
symfony/symfony
GitHubThe Symfony PHP framework
GitHubThe Symfony PHP framework>= 4.2.0, < 4.2.7, >= 4.1.0, < 4.1.12, >= 3.4.0, < 3.4.26, >= 2.8.0, < 2.8.50, >= 2.7.0, < 2.7.51NVD
drupal/drupalGitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.>= 8.5.0, < 8.5.15, >= 8.6.0, < 8.6.15NVD
RubyGems
NPM