Login Request a demo
FO
Product
Fosuserbundle
by Friends OF Symfony Project · last CVE Mar 22, 2024
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 2High 0Medium 0Low 0
Severity
All severities3Critical2High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Fosuserbundle to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-28861
9.8
2%
Mar 22
Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder
Affected: 1.1.0 before 1.5.19
CVE-2024-28859
9.0
1%
Mar 15
Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency
Affected: 1.3.0 before 1.5.18
CVE-2013-5750
–
1%
Sep 25
The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password…
Affected: through 1.3.2; 1.0.0; 1.1.0; 1.2.0; 1.2.1; 1.2.3; +4 more
Showing 3