GCVE - cpe:2.3:a:sensiolabs:symfony:2.0.15:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sensiolabs:symfony:2.0.15:*:*:*:*:*:*:*

part: a version: 2.0.15 update: *

Vendor	Sensiolabs (`e4f7b9e1-5bf2-556d-92af-e3d3eaa00050`)
Product	Symfony (`ba667c32-f585-51a5-878f-6a88255d834f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:composer/symfony/symfony`	purl2cpe	2026-06-01 10:16:26.105312
`pkg:github/symfony/symfony`	purl2cpe	2026-06-01 10:16:26.105313

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-2308`	vulnerable	2026-06-08 05:06:27.919032	Details available Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6 allows remote attackers to execute arbitrary PHP code via a language="php" attribute of a SCRIPT element. Published: 2015-06-24T10:00:00.000Z Updated: 2024-08-06T05:10:16.150Z Open on db.gcve.eu Reference links https://symfony.com/blog/cve-2015-2308-esi-code-injection http://jvndb.jvn.jp/jvndb/JVNDB-2015-000089 http://jvn.jp/en/jp/JVN19578958/index.html http://www.securityfocus.com/bid/75357	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5958`	vulnerable	2026-06-08 05:04:54.850658	Details available The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation, a similar issue to CVE-2013-5750. Published: 2014-12-27T18:00:00.000Z Updated: 2024-08-06T17:29:42.718Z Open on db.gcve.eu Reference links http://symfony.com/blog/security-releases-cve-2013-5958-symfony-2-0-25-2-1-13-2-2-9-and-2-3-6-released	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1397`	vulnerable	2026-06-08 05:03:53.736658	Details available Symfony 2.0.x before 2.0.22, 2.1.x before 2.1.7, and 2.2.x remote attackers to execute arbitrary PHP code via a serialized PHP object to the (1) Yaml::parse or (2) Yaml\Parser::parse function, a different vulnerability than CVE-2013-1348. Published: 2014-06-02T15:00:00.000Z Updated: 2024-08-06T14:57:05.044Z Open on db.gcve.eu Reference links http://secunia.com/advisories/51980 http://www.securityfocus.com/bid/57574 http://symfony.com/blog/security-release-symfony-2-0-22-and-2-1-7-released https://exchange.xforce.ibmcloud.com/vulnerabilities/81551	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1348`	vulnerable	2026-06-08 05:03:53.424334	Details available The Yaml::parse function in Symfony 2.0.x before 2.0.22 remote attackers to execute arbitrary PHP code via a PHP file, a different vulnerability than CVE-2013-1397. Published: 2014-06-02T15:00:00.000Z Updated: 2024-08-06T14:57:05.142Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/81550 http://secunia.com/advisories/51980 http://www.securityfocus.com/bid/57574 http://symfony.com/blog/security-release-symfony-2-0-22-and-2-1-7-released	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6432`	vulnerable	2026-06-08 05:03:00.101889	Details available Symfony 2.0.x before 2.0.20, 2.1.x before 2.1.5, and 2.2-dev, when the internal routes configuration is enabled, allows remote attackers to access arbitrary services via vectors involving a URI beginning with a /_internal substring. Published: 2012-12-27T11:00:00.000Z Updated: 2024-09-16T20:06:59.052Z Open on db.gcve.eu Reference links http://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6431`	vulnerable	2026-06-08 05:03:00.099209	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.