There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Symfony before 2.8.6 and 3.x before 3.0.6 allows remote attackers to bypass authentication by logging in
    with an empty password and valid username, which triggers an unauthenticated bind. (CVE-2016-2403)

在 Symfony PHP 架構中發現多個弱點，這些弱點可導致開放重新導向、跨網站要求偽造、資訊洩漏、工作階段固定或拒絕服務。

Symfony PHP 框架中发现多个漏洞，可能会造成开放重定向、跨站请求伪造、信息泄露、会话固定或拒绝服务。

Symfony PHPフレームワークに、オープンリダイレクト、クロスサイトリクエストフォージェリ、情報漏洩、セッション固定、またはサービス拒否を引き起こす可能性がある複数の脆弱性が見つかりました。

Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to open redirects, cross-site request forgery, information disclosure, session fixation or denial of service.

ID	名稱	產品	系列	已發布	已更新	嚴重性
434564	SCA: security update for symfony/security, symfony/security-core, symfony/symfony (GHSA-wvj5-r78r-hhfq)	Tenable Self-Hosted Container Security	SCA Checks	2025/8/19	2026/7/2	critical
434564	SCA: security update for symfony/security, symfony/security-core, symfony/symfony (GHSA-wvj5-r78r-hhfq)	Tenable Cloud Security	SCA Checks	2025/8/19	2026/7/2	critical
111535	Debian DSA-4262-1：symfony - 安全性更新	Nessus	Debian Local Security Checks	2018/8/6	2024/8/27	critical
111535	Debian DSA-4262-1：symfony - 安全更新	Nessus	Debian Local Security Checks	2018/8/6	2024/8/27	critical
111535	DebianDSA-4262-1：symfony - セキュリティ更新	Nessus	Debian Local Security Checks	2018/8/6	2024/8/27	critical
111535	Debian DSA-4262-1 : symfony - security update	Nessus	Debian Local Security Checks	2018/8/6	2024/8/27	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical