PatchFirst · Latest vulnerabilities
Vulnerabilities published for symfony/symfony in the last 30 days: 2. Listed in the KEV catalogue: 0.
Vulnerabilities: 102
Symfony 2.0.x before 2.0.20, 2.1.x before 2.1.5, and 2.2-dev, when the internal routes configuration is enabled, allows remote attackers to access arbitrary services via vectors involving a URI beginning with a /_internal substring.
Symfony 2.0.x before 2.0.20 does not process URL encoded data consistently within the Routing and Security components, which allows remote attackers to bypass intended URI restrictions via a doubly encoded string.
Check your installed stack and versions against the current vulnerability feeds.