Security Advisory

CVE-2019-11325

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-11-21 22:15:55

Last updated 2024-08-04 22:48:09

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Symfony before 4.2.12 and 4.3.x before 4.3.8. The VarExport component incorrectly escapes strings, allowing some specially crafted ones to escalate to execution of arbitrary PHP code. This is related to symfony/var-exporter.

← Browse all CVEs View on cve.org ↗