CVE-2017-11365

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-11365
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11365.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-11365
Aliases
Downstream
Published
2019-05-23T18:29:00Z
Modified
2026-08-03T11:46:04Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Certain Symfony products are affected by: Incorrect Access Control. This affects Symfony 2.7.30 and Symfony 2.8.23 and Symfony 3.2.10 and Symfony 3.3.3. The type of exploitation is: remote. The component is: Password validator.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:sensiolabs:symfony:2.7.30:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "2.7.30"
                },
                {
                    "last_affected": "2.7.30"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "sensiolabs:symfony"
        }
    ]
}
References

Affected packages

Git / github.com/symfony/security-http

Affected ranges

Type
GIT
Repo
https://github.com/symfony/security-http
Events
Introduced
459e2569cf47660bed0efba1d451803fe1061c55
Last Affected
b5684f5041e79d7e661c2afc046390fc7666f428
Database specific
Show details 
{
    "cpe": [
        "cpe:2.3:a:sensiolabs:symfony:2.7.30:*:*:*:*:*:*:*",
        "cpe:2.3:a:sensiolabs:symfony:2.8.23:*:*:*:*:*:*:*",
        "cpe:2.3:a:sensiolabs:symfony:3.2.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:sensiolabs:symfony:3.3.3:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "2.7.30"
        },
        {
            "last_affected": "2.7.30"
        },
        {
            "introduced": "2.8.23"
        },
        {
            "last_affected": "2.8.23"
        },
        {
            "introduced": "3.2.10"
        },
        {
            "last_affected": "3.2.10"
        },
        {
            "introduced": "3.3.3"
        },
        {
            "last_affected": "3.3.3"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*
2.7.30
2.8.23
3.*
3.2.10
3.3.3

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11365.json"

Git / github.com/symfony/symfony

Affected ranges

Type
GIT
Repo
https://github.com/symfony/symfony
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
878198cefae028386c6dc800ccbf18f2b9cbff3f
Database specific
Show details 
{
    "source": "REFERENCES"
}

Affected versions

v2.*
v2.0.0
v2.0.0-RC1
v2.0.0-RC2
v2.0.0-RC3
v2.0.0-RC4
v2.0.0-RC5
v2.0.0-RC6
v2.0.0BETA1
v2.0.0BETA2
v2.0.0BETA3
v2.0.0BETA4
v2.0.0BETA5
v2.0.0PR8
v2.1.0
v2.1.0-BETA1
v2.1.0-BETA2
v2.1.0-BETA3
v2.1.0-BETA4
v2.1.0-RC1
v2.1.0-RC2
v2.2.0-BETA1
v2.2.0-BETA2
v2.3.0-BETA1
v2.3.0-BETA2
v2.4.0-BETA1
v2.4.0-BETA2
v2.5.0-BETA1
v2.5.0-BETA2
v2.6.0-BETA1
v2.7.0
v2.7.0-BETA1
v2.7.0-BETA2
v2.7.1
v2.7.10
v2.7.11
v2.7.12
v2.7.13
v2.7.14
v2.7.15
v2.7.16
v2.7.17
v2.7.18
v2.7.19
v2.7.2
v2.7.20
v2.7.21
v2.7.22
v2.7.23
v2.7.24
v2.7.25
v2.7.26
v2.7.27
v2.7.28
v2.7.29
v2.7.3
v2.7.30
v2.7.31
v2.7.4
v2.7.5
v2.7.6
v2.7.7
v2.7.8
v2.7.9
Other
vPR3
vPR4
vPR5
vPR6
vPR8
vPR9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11365.json"