VULNERABILITY INTELLIGENCE

CVE-2012-5574

CVSS score5 MEDIUM

EPSS probability3.49%

CISA KEVNot currently listed

Published2012-12-18

Last modified2026-06-16

Description

lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request.