CVE-2012-6431

Symfony 2.0.x before 2.0.20 does not process URL encoded data consistently within the Routing and Security components, which allows remote attackers to bypass…

published December 27, 2012

CVSS
—
EPSS
2%
Percentile
79.1
In the wild
Unconfirmed
What it is

Symfony 2.0.x before 2.0.20 does not process URL encoded data consistently within the Routing and Security components, which allows remote attackers to bypass intended URI restrictions via a doubly encoded string.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01876 · 79.1th percentile
Published
2012-12-27T11:00Z
EPSS history
Timeline
  • 27 DEC 11:00Z
    Symfony 2.0.x before 2.0.20 does not process URL encoded data consistently within the Routing and Security components, which allows remote attackers to bypass…
    cvelistv5