关键信息 CVE ID: CVE-2025-64500 漏洞类型: Incorrect parsing of PATH_INFO can lead to limited authorization bypass 受影响版本: - 2.x: , - 3.x: , - 4.x: , - 5.0.x: , - 5.1.x: , - 5.2.x: , - 5.3.x: , - 5.4.x: , - 6.0.x: , - 6.1.x: , - 6.2.x: , - 6.3.x: , - 6.4.x: , - 7.0.x: , - 7.1.x: , - 7.2.x: , - 7.3.x: , 修复时间: - 5.4.x: 2025-11-12 11:09:14 - 6.4.x: 2025-11-12 11:09:14 - 7.3.x: 2025-11-12 11:09:14 参考链接: https://symfony.com/blog/cve-2025-64500-incorrect-parsing-of-path-info-can-lead-to-limited-authorization-bypass 参考包: composer://symfony/symfony