Approved changes feed: RSS · Atom

cpe:2.3:a:sensiolabs:symfony:2.0.24:*:*:*:*:*:*:*

part: a version: 2.0.24 update: *

VendorSensiolabs (e4f7b9e1-5bf2-556d-92af-e3d3eaa00050)
ProductSymfony (ba667c32-f585-51a5-878f-6a88255d834f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:composer/symfony/symfony purl2cpe 2026-06-01 10:16:26.105347
pkg:github/symfony/symfony purl2cpe 2026-06-01 10:16:26.105349

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5958 vulnerable 2026-06-08 05:04:54.855665 Details available
The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation, a similar issue to CVE-2013-5750.
Published: 2014-12-27T18:00:00.000Z
Updated: 2024-08-06T17:29:42.718Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.