Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. The UriSigner was subject to timing attacks. This is related to symfony/http-kernel.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sensio Labs Symfony 竞争条件问题漏洞
Vulnerability Description
Sensio Labs Symfony是法国Sensio Labs公司的一套免费的、基于MVC架构的PHP开发框架。该框架提供常用的功能组件及工具，可用于快速创建复杂的WEB程序。 Sensio Labs Symfony中存在竞争条件问题漏洞。攻击者可通过实施时序攻击利用该漏洞获取敏感信息。以下产品及版本受到影响：Sensio Labs Symfony 2.8.0版本至2.8.50版本，3.4.0版本至3.4.34版本，4.2.0版本至4.2.11版本，4.3.0版本至4.3.7版本。
CVSS Information
N/A
Vulnerability Type
N/A