https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T21:59:55.676260+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-468 certa-2013-avi-468 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Symfony</span>. Elles permettent à un attaquant… 2026-10-24T21:59:55.679601+00:00 certa-2013-avi-468 https://cve.radiocsirt.org/vuln/euvd-2026-107687 EUVD-2026-107687 2026-10-24T21:59:55.679637+00:00 EUVD-2026-107687 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4752 fkie_cve-2013-4752 2026-10-24T21:59:55.679653+00:00

Symfony 2.0.X before 2.0.24, 2.1.X before 2.1.12, 2.2.X before 2.2.5, and 2.3.X before 2.3.3 have an issue in the HttpFoundation component. The Host header can be manipulated by an attacker when the framework is generating an absolute URL. A remote attacker could exploit this vulnerability to inject malicious content into the Web application page and conduct various attacks.

 https://cve.radiocsirt.org/vuln/ghsa-22pv-7v9j-hqxp GHSA-22pv-7v9j-hqxp — Symfony Host Header Injection vulnerability in the HttpFoundation component 2026-10-24T21:59:55.679680+00:00

Affected: Packagist: symfony/symfony, Packagist: symfony/http-foundation

Symfony 2.0.X before 2.0.24, 2.1.X before 2.1.12, 2.2.X before 2.2.5, and 2.3.X before 2.3.3 have an issue in the HttpFoundation component. The Host header can be manipulated by an attacker when the framework is generating an absolute URL. A remote attacker could exploit this vulnerability to inject malicious content into the Web application page and conduct various attacks.

 https://cve.radiocsirt.org/vuln/gsd-2013-4752 gsd-2013-4752 2026-10-24T21:59:55.679709+00:00 gsd-2013-4752