CVE-2012-6432

Symfony 2.0.x before 2.0.20, 2.1.x before 2.1.5, and 2.2-dev, when the internal routes configuration is enabled, allows remote attackers to access arbitrary…

published December 27, 2012

CVSS
—
EPSS
1%
Percentile
67.0
In the wild
Unconfirmed
What it is

Symfony 2.0.x before 2.0.20, 2.1.x before 2.1.5, and 2.2-dev, when the internal routes configuration is enabled, allows remote attackers to access arbitrary services via vectors involving a URI beginning with a /_internal substring.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01173 · 67.0th percentile
Published
2012-12-27T11:00Z
EPSS history
Timeline
  • 27 DEC 11:00Z
    Symfony 2.0.x before 2.0.20, 2.1.x before 2.1.5, and 2.2-dev, when the internal routes configuration is enabled, allows remote attackers to access arbitrary…
    cvelistv5