VULNERABILITY INTELLIGENCE

CVE-2012-6431

CVSS score6.4 MEDIUM
EPSS probability1.88%
CISA KEVNot currently listed
Published2012-12-27
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N

Description

Symfony 2.0.x before 2.0.20 does not process URL encoded data consistently within the Routing and Security components, which allows remote attackers to bypass intended URI restrictions via a doubly encoded string.

Primary references