DEBIAN-CVE-2019-10912
- Source
- https://security-tracker.debian.org/tracker/CVE-2019-10912
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2019-10912.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2019-10912
- Upstream
- Downstream
- Published
- 2019-05-16T22:29:00Z
- Modified
- 2026-09-10T07:00:39Z
- Severity
-
- 7.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, it is possible to cache objects that may contain bad user input. On serialization or unserialization, this could result in the deletion of files that the current user has access to. This is related to symfony/cache and symfony/phpunit-bridge.
- References
Affected packages
Debian:12 / symfony
Package
- Name
- symfony
- Purl
- pkg:deb/debian/symfony?arch=source&distro=bookworm
Debian:13 / symfony
Package
- Name
- symfony
- Purl
- pkg:deb/debian/symfony?arch=source&distro=trixie
Debian:14 / symfony
Package
- Name
- symfony
- Purl
- pkg:deb/debian/symfony?arch=source&distro=forky