symphony vulnerabilities

CVEs whose affected-version data names the symphony package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2020-25912Critical· 9.1

A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement.php in Symphony 2.7.10 which can lead to an information disclosure or denial of service (DOS).

A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement.php in Symphony 2.7.10 which can lead to an information disclosure or denial of service (DOS).

▾ Midnightgetsymphony · symphonyEPSS 1.4%via NVD

symphony vulnerabilities (CVEs) · VulnSea