VULNERABILITY INTELLIGENCE

CVE-2019-18889

CVSS score9.8 CRITICAL
EPSS probability33.25%
CISA KEVNot currently listed
Published2019-11-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in Symfony 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. Serializing certain cache adapter interfaces could result in remote code injection. This is related to symfony/cache.

Weakness classification

  • nvd@nist.gov: CWE-94

Primary references