~ / search / GHSA-q8j7-fjh7-25v5

GHSA-q8j7-fjh7-25v5

Symfony collectionCascaded and collectionCascadedDeeply fields security bypass

Source: GitHub Advisory Database (reviewed) High CVE-2013-4751

Packages

EcosystemPackageAffectedFixed in
Packagist symfony/validator >= 2.0.0, < 2.0.24 2.0.24
Packagist symfony/validator >= 2.1.0, < 2.1.12 2.1.12
Packagist symfony/validator >= 2.2.0, < 2.2.5 2.2.5
Packagist symfony/validator >= 2.3.0, < 2.3.3 2.3.3
Packagist symfony/symfony >= 2.0.0, < 2.0.24 2.0.24
Packagist symfony/symfony >= 2.1.0, < 2.1.12 2.1.12
Packagist symfony/symfony >= 2.2.0, < 2.2.5 2.2.5
Packagist symfony/symfony >= 2.3.0, < 2.3.3 2.3.3

Details

As written in the advisory (Markdown source, shown as plain text).

When using the Validator component, if `Symfony\\Component\\Validator\\Mapping\\Cache\\ApcCache` is enabled (or any other cache implementing `Symfony\\Component\\Validator\\Mapping\\Cache\\CacheInterface`), some information is lost during serialization (the `collectionCascaded` and the `collectionCascadedDeeply` fields). As a consequence, arrays or traversable objects stored in fields using the `@Valid` constraint are not traversed by the validator as soon as the validator configuration is loaded from the cache.

References

External links from the advisory. They lead to third-party sites.