CVE-2019-10910
N/A
N/A
Summary
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, when service ids allow user input, this could allow for SQL Injection and remote code execution. This is related to symfony/dependency-injection.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://www.synology.com/security/advisory/Synology_SA_19_19
- https://symfony.com/blog/cve-2019-10910-check-service-ids-are-valid
- https://github.com/symfony/symfony/commit/d2fb5893923292a1da7985f0b56960b5bb10737b
References
- https://www.synology.com/security/advisory/Synology_SA_19_19
- https://symfony.com/blog/cve-2019-10910-check-service-ids-are-valid
- https://github.com/symfony/symfony/commit/d2fb5893923292a1da7985f0b56960b5bb10737b
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.