Security Advisory

CVE-2015-2308

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-06-24 10:00:00

Last updated 2024-08-06 05:10:16

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6 allows remote attackers to execute arbitrary PHP code via a language="php" attribute of a SCRIPT element.

← Browse all CVEs View on cve.org ↗