CVE-2013-4751

HighCVSS 8.1/10Last modified Jun 16, 2026

Description

php-symfony2-Validator has loss of information during serialization

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114380.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114436.htmlMailing List, Third Party Advisory
http://symfony.com/blog/security-releases-symfony-2-0-24-2-1-12-2-2-5-and-2-3-3-releasedPatch, Vendor Advisory
http://www.securityfocus.com/bid/61709Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4751Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/86364Third Party Advisory, VDB Entry
http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114380.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114436.htmlMailing List, Third Party Advisory
http://symfony.com/blog/security-releases-symfony-2-0-24-2-1-12-2-2-5-and-2-3-3-releasedPatch, Vendor Advisory
http://www.securityfocus.com/bid/61709Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4751Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/86364Third Party Advisory, VDB Entry

Timeline

Published: Nov 1, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-47526.1Symfony 2.0.X before 2.0.24, 2.1.X before 2.1.12, 2.2.X before 2.2.5, and 2.3.X before 2.3.3 have an issue in the HttpFoundation component. CVE-2013-47533.5Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to inject arbitrary web CVE-2013-47543.5Multiple cross-site scripting (XSS) vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary CVE-2013-47586.8Double free vulnerability in the writeDataError function in the ElasticSearch plugin (omelasticsearch) in rsyslog before 7.4.2 and before 7.CVE-2013-47594.3Multiple cross-site scripting (XSS) vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 for Magnolia CMS allow CVE-2013-47615.1Unspecified vulnerability in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.CVE-2013-47625.8Puppet Enterprise before 3.0.1 does not sufficiently invalidate a session when a user logs out, which might allow remote attackers to hijack CVE-2013-47634.6Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission.CVE-2013-47644.3Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations wit CVE-2013-47664.3The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Co CVE-2013-476710.0Unspecified vulnerability in Eucalyptus before 3.3.2 has unknown impact and attack vectors.CVE-2013-47685.0The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "networ