CVE-2015-2308

Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6 allows…

published June 24, 2015

CVSS
—
EPSS
1%
Percentile
70.9
In the wild
Unconfirmed
What it is

Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6 allows remote attackers to execute arbitrary PHP code via a language="php" attribute of a SCRIPT element.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01338 · 70.9th percentile
Published
2015-06-24T10:00Z
EPSS history
Timeline
  • 24 JUN 10:00Z
    Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x before 2.3.27, 2.4.x and 2.5.x before 2.5.11, and 2.6.x before 2.6.6 allows…
    cvelistv5