GCVE - cpe:2.3:a:sensiolabs:symfony:2.1.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sensiolabs:symfony:2.1.3:*:*:*:*:*:*:*

part: a version: 2.1.3 update: *

Vendor	Sensiolabs (`e4f7b9e1-5bf2-556d-92af-e3d3eaa00050`)
Product	Symfony (`ba667c32-f585-51a5-878f-6a88255d834f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:composer/symfony/symfony`	purl2cpe	2026-06-01 10:16:26.105410
`pkg:github/symfony/symfony`	purl2cpe	2026-06-01 10:16:26.105412

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-2308`	vulnerable	2026-06-08 05:06:27.926437	Details available Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6 allows remote attackers to execute arbitrary PHP code via a language="php" attribute of a SCRIPT element. Published: 2015-06-24T10:00:00.000Z Updated: 2024-08-06T05:10:16.150Z Open on db.gcve.eu Reference links https://symfony.com/blog/cve-2015-2308-esi-code-injection http://jvndb.jvn.jp/jvndb/JVNDB-2015-000089 http://jvn.jp/en/jp/JVN19578958/index.html http://www.securityfocus.com/bid/75357	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5958`	vulnerable	2026-06-08 05:04:54.857614	Details available The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstrated by a PBKDF2 computation, a similar issue to CVE-2013-5750. Published: 2014-12-27T18:00:00.000Z Updated: 2024-08-06T17:29:42.718Z Open on db.gcve.eu Reference links http://symfony.com/blog/security-releases-cve-2013-5958-symfony-2-0-25-2-1-13-2-2-9-and-2-3-6-released	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1397`	vulnerable	2026-06-08 05:03:53.741090	Details available Symfony 2.0.x before 2.0.22, 2.1.x before 2.1.7, and 2.2.x remote attackers to execute arbitrary PHP code via a serialized PHP object to the (1) Yaml::parse or (2) Yaml\Parser::parse function, a different vulnerability than CVE-2013-1348. Published: 2014-06-02T15:00:00.000Z Updated: 2024-08-06T14:57:05.044Z Open on db.gcve.eu Reference links http://secunia.com/advisories/51980 http://www.securityfocus.com/bid/57574 http://symfony.com/blog/security-release-symfony-2-0-22-and-2-1-7-released https://exchange.xforce.ibmcloud.com/vulnerabilities/81551	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6432`	vulnerable	2026-06-08 05:03:00.106639	Details available Symfony 2.0.x before 2.0.20, 2.1.x before 2.1.5, and 2.2-dev, when the internal routes configuration is enabled, allows remote attackers to access arbitrary services via vectors involving a URI beginning with a /_internal substring. Published: 2012-12-27T11:00:00.000Z Updated: 2024-09-16T20:06:59.052Z Open on db.gcve.eu Reference links http://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.