8.1
CVE-2013-4751
- EPSS 0.6%
- Veröffentlicht 01.11.2019 13:15:11
- Zuletzt bearbeitet 21.11.2024 01:56:18
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
php-symfony2-Validator has loss of information during serialization
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sensiolabs ≫ Symfony Version >= 2.0.0 < 2.0.24
Sensiolabs ≫ Symfony Version >= 2.1.0 < 2.1.12
Sensiolabs ≫ Symfony Version >= 2.2.0 < 2.2.5
Sensiolabs ≫ Symfony Version >= 2.3.0 < 2.3.3
Fedoraproject ≫ Fedora Version18
Fedoraproject ≫ Fedora Version19
Redhat ≫ Enterprise Linux Version6.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.6% | 0.668 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.1 | 2.8 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
|
| nvd@nist.gov | 4.9 | 6.8 | 4.9 |
AV:N/AC:M/Au:S/C:P/I:P/A:N
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.