CVE-2023-46735
Fixed upstream EPSS <1%CVSS 6.1
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in version 6.0.0 and prior to version 6.3.8, the error message in `WebhookController` returns unescaped user-submitted input. As of version 6.3.8, `WebhookController` now doesn't return any user-submitted input in its response.
Products: symfony
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Packagist | symfony/symfony | 6.3.8 |
| Packagist | symfony/webhook | 6.3.8 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 20.04 LTS | symfony | no fix |
| Ubuntu 22.04 LTS | symfony | no fix |
| Ubuntu 24.04 LTS | symfony | no fix |
| Ubuntu 24.10 | symfony | no fix |
| Ubuntu Pro 16.04 LTS | symfony | no fix |
| Ubuntu Pro 18.04 LTS | symfony | no fix |