Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/drupal/drupal ↗ | |
| b73ab73d39dca97a12513e8a9e4f4da4b0676f5f to before c5bc3922f27c93ab3669428a504212adb801400f | c5bc3922f27c93ab3669428a504212adb801400f |
| 9b04d294324d9c76be4b596de4316cb8804e8223 to before 91ded4b7776e05ee9633bdc1c458b41c718133e0 | 91ded4b7776e05ee9633bdc1c458b41c718133e0 |
Also listed as affected (17)
| |
| GIT github.com/symfony/security-http ↗ | |
| de2f3d51160791ef254010953dbde178fee9845f to before 04969233b866f5b80bda38a51e79463536926a84 | 04969233b866f5b80bda38a51e79463536926a84 |
| a8d5dd00894f8b5e3edb897f4504c51ddc442370 to before 7e0b49a8d10e31c0cd0431bbc99b20b6c5be4fb7 | 7e0b49a8d10e31c0cd0431bbc99b20b6c5be4fb7 |
| 33c98765dc6fec4907b7431d10e3c0945f061108 to before 58e2b17e90640c3bc80dcf0601561c6b54e4869f | 58e2b17e90640c3bc80dcf0601561c6b54e4869f |
| 946668ddc1fa0279fe03e2c090ebc29881f12ddb to before 67f6163f2efe91e586b5a6982294c6e91c70e335 | 67f6163f2efe91e586b5a6982294c6e91c70e335 |
| 34e089af7d363bd2ded8ad15f06b2b97348b97e5 to before ff2189e9921e4a88c4f621fa44444fe2b4fb1b11 | ff2189e9921e4a88c4f621fa44444fe2b4fb1b11 |
Also listed as affected (150)
| |
| GIT github.com/symfony/symfony ↗ | |
| 9975b1eca3de4db792a2c3e4e16f676a4aadcd46 to before 20f9c87a12a0749ad3a96da256b4d0f95aad4beb | 20f9c87a12a0749ad3a96da256b4d0f95aad4beb |
| 5615b92cd452cd54f1433a3f53de87c096a1107f to before 2ef4e09343bdbdee0a7968f58b8ec594ce0aa47d | 2ef4e09343bdbdee0a7968f58b8ec594ce0aa47d |
| 0a47db379b8cc74cdd84e1e6870fafc4a4ac8351 to before 1b89e7baec9891c323bbf1ec81af77d901fc60c9 | 1b89e7baec9891c323bbf1ec81af77d901fc60c9 |
| 58261043876feb695640457c5675bb331a6eb3b7 to before 482d06316077da115e5dac2afd2a7ce9f5f100f7 | 482d06316077da115e5dac2afd2a7ce9f5f100f7 |
| 7bd9a1bae87e6b2d7eba499ebf3053ff4bc3a483 to before 6122c791d640b75702514c18c8aae816dbbefae2 | 6122c791d640b75702514c18c8aae816dbbefae2 |
| Not specified | ab4d05358c3d0dd1a36fc8c306829f68e3dd84e2 |
Also listed as affected (146)
| |
Description
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, validation messages are not escaped, which can lead to XSS when user input is included. This is related to symfony/framework-bundle.